CVE-2024-39375CWE-603

Use of Client-Side Authentication in TELSAT marKoni FM Transmitter

Critical · published June 27, 2024

CVSS v4.0
9.3
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

🚨 An authentication bypass vulnerability in TELSAT marKoni FM Transmitters is a game-changer, letting attackers gain admin access like they’ve got a backstage pass to the security concert! 🔥 Imagine a party where anyone can waltz past the bouncers without showing ID — that’s what this vulnerability allows! The system is trusting requests without checking if they’re from authorized guests, opening the door to mayhem. An attacker could take full control of the transmitter, manipulating settings, cutting off broadcasts, or even hijacking communications entirely. This could lead to unauthorized broadcasts or a complete service shutdown, which would be absolutely devastating for any organization relying on these devices.

Put simply

Imagine a party where anyone can waltz past the bouncers without showing ID — that’s what this vulnerability allows! The system is trusting requests without checking if they’re from authorized guests, opening the door to mayhem. This vulnerability allows attackers to bypass authentication mechanisms in TELSAT marKoni FM Transmitters, gaining unchecked administrator privileges and the ability to change configurations without restriction.

What to do

An attacker could take full control of the transmitter, manipulating settings, cutting off broadcasts, or even hijacking communications entirely. This could lead to unauthorized broadcasts or a complete service shutdown, which would be absolutely devastating for any organization relying on these devices. It's crucial to patch your TELSAT marKoni FM Transmitters to the latest firmware version as soon as possible. Additionally, review security configurations and enforce strict access controls to limit exposure until the patch is applied. Don't leave admin access open to anyone! You've got this! Follow these steps to secure your transmitters and keep your broadcasts safe. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00567 · 46.3th percentile
Weakness
CWE-603 · Use of Client-Side Authentication
Published
2024-06-27T16:07Z
EPSS history
Timeline
  • 27 JUN 16:07Z
    Use of Client-Side Authentication in TELSAT marKoni FM Transmitter
    cvelistv5