CVE-2024-39374

CVE-2024-39374 affects TELSAT marKoni FM Transmitters (Markoni-D/Compact and Markoni-DH/Exciter+Amplifiers; affected versions prior to 2.0.1). Root cause: a hidden admin account accessible via hard-coded credentials, enabling an attacker to gain administrative access without authentication. Publi...

CVE-2024-39373 Improper Neutralization of Special Elements used in a Command in TELSAT marKoni FM Transmitter

TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain unauthorized access to the system with administrative privileges...

CVE-2024-39373

The CVE-2024-39373 affects TELSAT marKoni FM Transmitters (Markoni-D Compact and Markoni-DH Exciter+Amplifiers) with all versions prior to 2.0.1. It is an Improper Neutralization of Special Elements used in a Command in the device settings, i.e., a command injection (CWE-77) that could allow an a...

TELSAT marKoni FM Transmitter

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : marKoni Equipment : Markoni-D Compact FM Transmitters, Markoni-DH Exciter+Amplifiers FM Transmitters Vulnerabilities : Command Injection, Use of Hard-coded...

PT-2024-28476 · Telsat · Telsat Markoni Fm Transmitters

Name of the Vulnerable Software and Affected Versions: TELSAT marKoni FM Transmitters affected versions not specified Description: The issue allows an attacker to bypass authentication and gain administrator privileges. Recommendations: At the moment, there is no information about a newer version...

CVE-2024-39374: Use of Hard-coded Credentials

TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials...

CVE-2024-39375: Use of Client-Side Authentication

TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges...

CVE-2024-39373: Improper Neutralization of Special Elements used in a Command

TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings and could allow an attacker to gain unauthorized access to the system with administrative privileges...

PT-2024-28475 · Telsat · Telsat Markoni Fm Transmitters

Name of the Vulnerable Software and Affected Versions: TELSAT marKoni FM Transmitters affected versions not specified Description: The issue concerns a hidden admin account in TELSAT marKoni FM Transmitters that can be accessed using hard-coded credentials, allowing an attacker to exploit this...

PT-2024-28474 · Telsat · Telsat Markoni Fm Transmitters

Name of the Vulnerable Software and Affected Versions: TELSAT marKoni FM Transmitters affected versions not specified Description: The issue is related to a command injection vulnerability that can be exploited through the manipulation of settings, potentially allowing an attacker to gain...

CVE-2024-39376: Improper Access Control

TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permissions...

CVE-2024-3742

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

EUVD-2024-32316

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

CVE-2024-3742

CVE-2024-3742 affects Electrolink FM/DAB/TV Transmitters. Affected devices store credentials in clear-text (eg, controlloLogin.js/login.htm/mail.htm), enabling an attacker to access credentials and gain system access. Unauthenticated credential disclosure is supported by the NUCLEI template; impa...

CVE-2024-3741

Summary : CVE-2024-3741 affects Electrolink FM/DAB/TV Transmitters and is an authentication-bypass vulnerability in the login cookie, allowing an attacker to gain full system access by setting an arbitrary cookie value other than 'NO'. Affected products : A wide range of Electrolink transmitters ...

PT-2024-27529

Name of the Vulnerable Software and Affected Versions Electrolink transmitters affected versions not specified Description The issue concerns an authentication bypass affecting the login cookie. An attacker can set an arbitrary value, except 'NO', to the login cookie and gain full system access...

CVE-2024-3741: Authentication Bypass by Assumed-Immutable Data

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access...

CVE-2024-3742: Cleartext Storage of Sensitive Information

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system...

PT-2024-27537 · Electrolink · Electrolink Transmitters

Name of the Vulnerable Software and Affected Versions: Electrolink transmitters affected versions not specified Description: The issue concerns Electrolink transmitters storing credentials in clear-text, which could allow an attacker to access the system using these credentials. Recommendations: ...

TEM Opera Plus FM Family Transmitter 35.45 - Remote Code Execution Vulnerability

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution Vendor: Telecomunicazioni Elettro Milano TEM S.r.l. Product web page: https://www.tem-italy.it Affected version: Software version: 35.45 Webserver version: 1.7 Summary: This new line of Opera plus FM Transmitters combines very high...