CVE-2024-21846: Electrolink Compact Dab Transmitter

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.

Affected products

• Electrolink Compact Dab Transmitter: version 10W only; version 100W only; version 250W only; version 10w only; version 100w only; version 250w only
• Electrolink Compact Fm Transmitter: version 500W only; version 1kW only; version 2kW only; version 500w only; version 1kw only; version 2kw only
• Electrolink Digital Fm Transmitter: from 15W, up to and including 40kW; from 15w, up to and including 40kw
• Electrolink High Power Dab Transmitter: version 2.5kW only; version 3kW only; version 4kW only; version 5kW only; version 2.5kw only; version 3kw only; …
• Electrolink Medium Dab Transmitter: version 500W only; version 1kW only; version 2kW only; version 500w only; version 1kw only; version 2kw only
• Electrolink Modular Fm Transmitter: version 3kW only; version 5kW only; version 10kW only; version 15kW only; version 20kW only; version 30kW only; …
• Electrolink Uhf Tv Transmitter: from 10W, up to and including 5kW; from 10w, up to and including 5kw
• Electrolink Vhf Tv Transmitter

Published 2024-04-18. Last modified 2026-06-17.