CVE-2024-21872

🗓️ 18 Apr 2024 22:10:42Reported by icscertType

cve🔗 web.nvd.nist.gov👁 81 Views🌐 WEB

Device vulnerability allowing unauthenticated access to critical operations

Reporter	Title	Published	Views	Family All 9
CNNVD	Electrolink FM/DAB/TV Transmitter 安全漏洞	18 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-21872 Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking	18 Apr 202422:10	–	cvelist
EUVD	EUVD-2024-19483	3 Oct 202520:07	–	euvd
ICS	Electrolink FM/DAB/TV Transmitter	16 Apr 202406:00	–	ics
NVD	CVE-2024-21872	18 Apr 202423:15	–	nvd
Positive Technologies	PT-2024-19105 · Electrolink · Electrolink Fm/Dab/Tv Transmitter	16 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-21872	5 Feb 202510:46	–	redhatcve
Vulnrichment	CVE-2024-21872 Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking	18 Apr 202422:10	–	vulnrichment
Zero Science Lab	Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality	30 Sep 202300:00	–	zeroscience

Vulners

Node

electrolink compact_dab_transmitter_10wMatch10w

electrolink compact_dab_transmitter_100wMatch100w

electrolink medium_dab_transmitter_1kwMatch1kw

electrolink medium_dab_transmitter_2kwMatch2kw

electrolink high_power_dab_transmitterMatch3kw

electrolink high_power_dab_transmitter_4kwMatch4kw

electrolink high_power_dab_transmitterMatch5kw

electrolink modular_fm_transmitter_3kwMatch3kw

electrolink modular_fm_transmitter_5kwMatch5kw

electrolink modular_fm_transmitter_10kwMatch10kw

electrolink modular_fm_transmitter_20kwMatch20kw

electrolink modular_fm_transmitter_30kwMatch30kw

electrolink digital_fm_transmitter_40kwRange≤40kw

electrolink uhf_tv_transmitter_5kwRange≤5kw

[
  {
    "defaultStatus": "unaffected",
    "product": "Compact DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "10W"
      },
      {
        "status": "affected",
        "version": "100W"
      },
      {
        "status": "affected",
        "version": "250W"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Medium DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "500W"
      },
      {
        "status": "affected",
        "version": "1kW"
      },
      {
        "status": "affected",
        "version": "2kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "High Power DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "2.5kW"
      },
      {
        "status": "affected",
        "version": "3kW"
      },
      {
        "status": "affected",
        "version": "4kW"
      },
      {
        "status": "affected",
        "version": "5kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "Compact FM Transmitter"
      },
      {
        "status": "affected",
        "version": "500W"
      },
      {
        "status": "affected",
        "version": "1kW"
      },
      {
        "status": "affected",
        "version": "2kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modular FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "3kW"
      },
      {
        "status": "affected",
        "version": "5kW"
      },
      {
        "status": "affected",
        "version": "10kW"
      },
      {
        "status": "affected",
        "version": "15kW"
      },
      {
        "status": "affected",
        "version": "20kW"
      },
      {
        "status": "affected",
        "version": "30kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digital FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "lessThanOrEqual": "40kW",
        "status": "affected",
        "version": "15W",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VHF TV Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "BI"
      },
      {
        "status": "affected",
        "version": "BIII"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "UHF TV Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "lessThanOrEqual": "5kW",
        "status": "affected",
        "version": "10W",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

Parameter	Position	Path	Description	CWE
Login	header	home.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	setting.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	lan.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	snmp.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	mail.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	login.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	admin.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565
Login	header	terminal.htm	Unauthenticated bypass by manipulating cookie to reveal hidden admin pages.	CWE-565

17 Jun 2026 07:10Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 48.7

EPSS0.00551

SSVC

CWE-565