CVE-2024-22179

🗓️ 18 Apr 2024 22:06:26Reported by icscertType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

The app is vulnerable to unauthenticated parameter manipulation, allowing access to admin panel and arbitrary password chang

Reporter	Title	Published	Views	Family All 9
CNNVD	Electrolink FM/DAB/TV Transmitter 安全漏洞	18 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-22179 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data	18 Apr 202422:06	–	cvelist
EUVD	EUVD-2024-19775	3 Oct 202520:07	–	euvd
ICS	Electrolink FM/DAB/TV Transmitter	16 Apr 202406:00	–	ics
NVD	CVE-2024-22179	18 Apr 202422:15	–	nvd
Positive Technologies	PT-2024-19258 · Electrolink · Compact Dab Transmitter +6	18 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-22179	4 Feb 202523:48	–	redhatcve
Vulnrichment	CVE-2024-22179 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data	18 Apr 202422:06	–	vulnrichment
Zero Science Lab	Electrolink FM/DAB/TV Transmitter Remote Authentication Removal	30 Sep 202300:00	–	zeroscience

Vulners

Vulnrichment

Node

electrolink compact_dab_transmitterMatch10w

electrolink compact_dab_transmitterMatch100w

electrolink compact_dab_transmitterMatch250w

electrolink medium_dab_transmitterMatch500w

electrolink medium_dab_transmitterMatch1kw

electrolink medium_dab_transmitterMatch2kw

electrolink high_power_dab_transmitterMatch2.5kw

electrolink high_power_dab_transmitterMatch3kw

electrolink high_power_dab_transmitterMatch4kw

electrolink high_power_dab_transmitterMatch5kw

electrolink compact_fm_transmitter

electrolink modular_fm_transmitterMatch3kw

electrolink modular_fm_transmitterMatch5kw

electrolink modular_fm_transmitterMatch10kw

electrolink modular_fm_transmitterMatch15kw

electrolink modular_fm_transmitterMatch20kw

electrolink modular_fm_transmitterMatch30kw

electrolink digital_fm_transmitterRange≤40kw

electrolink vhf_tv_transmitter

electrolink uhf_tv_transmitterRange≤5kw

[
  {
    "defaultStatus": "unaffected",
    "product": "Compact DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "10W"
      },
      {
        "status": "affected",
        "version": "100W"
      },
      {
        "status": "affected",
        "version": "250W"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Medium DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "500W"
      },
      {
        "status": "affected",
        "version": "1kW"
      },
      {
        "status": "affected",
        "version": "2kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "High Power DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "2.5kW"
      },
      {
        "status": "affected",
        "version": "3kW"
      },
      {
        "status": "affected",
        "version": "4kW"
      },
      {
        "status": "affected",
        "version": "5kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "Compact FM Transmitter"
      },
      {
        "status": "affected",
        "version": "500W"
      },
      {
        "status": "affected",
        "version": "1kW"
      },
      {
        "status": "affected",
        "version": "2kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modular FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "3kW"
      },
      {
        "status": "affected",
        "version": "5kW"
      },
      {
        "status": "affected",
        "version": "10kW"
      },
      {
        "status": "affected",
        "version": "15kW"
      },
      {
        "status": "affected",
        "version": "20kW"
      },
      {
        "status": "affected",
        "version": "30kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digital FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "lessThanOrEqual": "40kW",
        "status": "affected",
        "version": "15W",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VHF TV Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "BI"
      },
      {
        "status": "affected",
        "version": "BIII"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "UHF TV Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "lessThanOrEqual": "5kW",
        "status": "affected",
        "version": "10W",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

Parameter	Position	Path	Description	CWE
adminuser	request body	/login.htm	Unauthenticated parameter manipulation allowing credentials to be blank, granting access to admin panel (account takeover and arbitrary password change).	CWE-302
guestuser	request body	/login.htm	Unauthenticated parameter manipulation allowing credentials to be blank, granting access to admin panel (account takeover and arbitrary password change).	CWE-302
adminpassword	request body	/login.htm	Unauthenticated parameter manipulation allowing credentials to be blank, granting access to admin panel (account takeover and arbitrary password change).	CWE-302
guestpassword	request body	/login.htm	Unauthenticated parameter manipulation allowing credentials to be blank, granting access to admin panel (account takeover and arbitrary password change).	CWE-302

15 Apr 2026 00:35Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 48.7

EPSS0.00075

SSVC

CWE-302