PT-2025-17303 · Unknown · Electrolink 500W

Mohamed Shahat · Published 2025-04-18 · Updated 2025-04-30 · CVE-2025-28228

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web versions v01.07 through v01.09 Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Display versions v1.2 through v1.4

Description A credential exposure issue allows unauthorized attackers to access credentials in plaintext.

Recommendations For Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web versions v01.07 through v01.09, update to a version that fixes the credential exposure issue. For Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Display versions v1.2 through v1.4, update to a version that fixes the credential exposure issue.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-28228

Affected Products

Electrolink 500W

References · 4

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28228 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-28228 · Security Note
• https://twitter.com/pdnuclei_bot/status/1917609905856393395 · Twitter Post
• https://twitter.com/CVEnew/status/1913312987194278372 · Twitter Post