CVE-2024-22179

🗓️ 18 Apr 2024 22:06:26Reported by icscertType

cve🔗 web.nvd.nist.gov👁 104 Views🌐 WEB

The app is vulnerable to unauthenticated parameter manipulation, allowing access to admin panel and arbitrary password chang

Reporter	Title	Published	Views	Family All 10
CNNVD	Electrolink FM/DAB/TV Transmitter security vulnerabilities	18 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-22179 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data	18 Apr 202422:06	–	cvelist
EUVD	EUVD-2024-19775	3 Oct 202520:07	–	euvd
ICS	Electrolink FM/DAB/TV Transmitter	16 Apr 202406:00	–	ics
NVD	CVE-2024-22179	18 Apr 202422:15	–	nvd
Positive Technologies	PT-2024-19258 · Electrolink · Compact Dab Transmitter +6	18 Apr 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-22179: Authentication Bypass by Assumed-Immutable Data	18 Apr 202400:00	–	rapid7
RedhatCVE	CVE-2024-22179	4 Feb 202523:48	–	redhatcve
Vulnrichment	CVE-2024-22179 Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data	18 Apr 202422:06	–	vulnrichment
Zero Science Lab	Electrolink FM/DAB/TV Transmitter Remote Authentication Removal	30 Sep 202300:00	–	zeroscience

Vulners

Vulnrichment

Node

electrolink compact_dab_transmitter_10wMatch10w

electrolink compact_dab_transmitter_100wMatch100w

electrolink compact_dab_transmitter_250wMatch250w

electrolink medium_500wMatch500w

electrolink medium_1kwMatch1kw

electrolink medium_2kwMatch2kw

electrolink high_power_dab_transmitter_2.5kwMatch2.5kw

electrolink high_power_dab_transmitter_3kwMatch3kw

electrolink high_power_dab_transmitter_4kwMatch4kw

electrolink high_power_dab_transmitter_5kwMatch5kw

electrolink modular_fm_transmitter_3kwMatch3kw

electrolink modular_fm_transmitter_5kwMatch5kw

electrolink modular_fm_transmitter_10kwMatch10kw

electrolink modular_fm_transmitter_15kwMatch15kw

electrolink modular_fm_transmitter_20kwMatch20kw

electrolink modular_fm_transmitter_30kwMatch30kw

electrolink digital_fm_transmitter_40kwRange≤40kw

electrolink uhf_tv_transmitter_5kwRange≤5kw

[
  {
    "defaultStatus": "unaffected",
    "product": "Compact DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "10W"
      },
      {
        "status": "affected",
        "version": "100W"
      },
      {
        "status": "affected",
        "version": "250W"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Medium DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "500W"
      },
      {
        "status": "affected",
        "version": "1kW"
      },
      {
        "status": "affected",
        "version": "2kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "High Power DAB Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "2.5kW"
      },
      {
        "status": "affected",
        "version": "3kW"
      },
      {
        "status": "affected",
        "version": "4kW"
      },
      {
        "status": "affected",
        "version": "5kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "Compact FM Transmitter"
      },
      {
        "status": "affected",
        "version": "500W"
      },
      {
        "status": "affected",
        "version": "1kW"
      },
      {
        "status": "affected",
        "version": "2kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Modular FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "3kW"
      },
      {
        "status": "affected",
        "version": "5kW"
      },
      {
        "status": "affected",
        "version": "10kW"
      },
      {
        "status": "affected",
        "version": "15kW"
      },
      {
        "status": "affected",
        "version": "20kW"
      },
      {
        "status": "affected",
        "version": "30kW"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digital FM Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "lessThanOrEqual": "40kW",
        "status": "affected",
        "version": "15W",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VHF TV Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "status": "affected",
        "version": "BI"
      },
      {
        "status": "affected",
        "version": "BIII"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "UHF TV Transmitter",
    "vendor": "Electrolink",
    "versions": [
      {
        "lessThanOrEqual": "5kW",
        "status": "affected",
        "version": "10W",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

Parameter	Position	Path	Description	CWE
adminuser	request body	/login.htm	Unauthenticated parameter manipulation that allows setting credentials to blank, granting access to the admin panel and enabling account takeover/arbitrary password change.	CWE-302
guestuser	request body	/login.htm	Unauthenticated parameter manipulation that allows setting credentials to blank, granting access to the admin panel and enabling account takeover/arbitrary password change.	CWE-302
adminpassword	request body	/login.htm	Unauthenticated parameter manipulation that allows setting credentials to blank, granting access to the admin panel and enabling account takeover/arbitrary password change.	CWE-302
guestpassword	request body	/login.htm	Unauthenticated parameter manipulation that allows setting credentials to blank, granting access to the admin panel and enabling account takeover/arbitrary password change.	CWE-302

17 Jun 2026 07:10Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

CVSS 48.7

EPSS0.00391

SSVC

CWE-302