PT-2025-49133 · Unknown · Radio Network Fm Transmitter

CVE-2024-58277 · Publicado 2025-12-04 · Atualizado 2025-12-04

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions R Radio Network FM Transmitter version 1.07

Description An unauthenticated attacker can access the admin user's password through the system.cgi endpoint. This allows for authentication bypass and access to FM station setup. The system.cgi API endpoint is vulnerable.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the system.cgi endpoint.

Exploit

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2024-58277

Produtos afetados

Radio Network Fm Transmitter

Referências · 5

• 🔥 https://exploit-db.com/exploits/51855 · Exploit
• https://vulncheck.com/advisories/r-radio-network-fm-transmitter-107-system-settings-disclosure · Nota
• https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5802.php · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1996685097479602588 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-58277 · Nota de Segurança