PT-2024-19089 · Electrolink · Compact Dab Transmitter+6

Gjoko Krstic · Published 2024-04-18 · Updated 2024-05-28 · CVE-2024-21846

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the "command.cgi" gateway, resulting in a denial-of-service scenario.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-21846

Affected Products

Compact Dab Transmitter

Compact Fm Transmitter

Digital Fm Transmitter

High Power Dab Transmitter

Medium Dab Transmitter

Modular Fm Transmitter

Uhf Tv Transmitter

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-21846 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-107-02 · Note
• https://t.me/cvenotify/77369 · Telegram Post
• https://twitter.com/CVEnew/status/1781102361001533812 · Twitter Post