PT-2024-19258 · Electrolink · Compact Dab Transmitter+6

Gjoko Krstic · Published 2024-04-18 · Updated 2024-05-28 · CVE-2024-22179

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Application (affected versions not specified)

Description The issue allows an attacker to perform an unauthenticated parameter manipulation. This manipulation enables the attacker to set credentials to blank, thereby gaining access to the admin panel. Additionally, it is vulnerable to account takeover and arbitrary password change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-302

Related Identifiers

CVE-2024-22179

Affected Products

Compact Dab Transmitter

Compact Fm Transmitter

Digital Fm Transmitter

High Power Dab Transmitter

Medium Dab Transmitter

Modular Fm Transmitter

Uhf Tv Transmitter

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-22179 · Security Note
• https://twitter.com/CVEnew/status/1781102364130443593 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-107-02 · Note
• https://t.me/cvenotify/77421 · Telegram Post
• https://t.me/cvenotify/77361 · Telegram Post