EUVD-2024-32315

Malicious code in bioql PyPI...

CVE-2024-3741

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...

CVE-2024-3742

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

CVE-2024-3742

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

CVE-2024-3742

CVE-2024-3742 affects Electrolink FM/DAB/TV Transmitters. Affected devices store credentials in clear-text (eg, controlloLogin.js/login.htm/mail.htm), enabling an attacker to access credentials and gain system access. Unauthenticated credential disclosure is supported by the NUCLEI template; impa...

EUVD-2024-32316

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

CVE-2024-3741: Authentication Bypass by Assumed-Immutable Data

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...

CVE-2024-3742: Cleartext Storage of Sensitive Information

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

PT-2024-27537 · Electrolink · Electrolink Transmitters

Name of the Vulnerable Software and Affected Versions: Electrolink transmitters affected versions not specified Description: The issue concerns Electrolink transmitters storing credentials in clear-text, which could allow an attacker to access the system using these credentials. Recommendations: ...