CVE-2024-21872: Electrolink Compact Dab Transmitter

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.

Affected products

• Electrolink Compact Dab Transmitter: version 10W only; version 100W only; version 250W only; affected versions not specified
• Electrolink Compact Fm Transmitter: version 500W only; version 1kW only; version 2kW only; affected versions not specified
• Electrolink Digital Fm Transmitter: from 15W, up to and including 40kW; affected versions not specified
• Electrolink High Power Dab Transmitter: version 2.5kW only; version 3kW only; version 4kW only; version 5kW only; affected versions not specified
• Electrolink Medium Dab Transmitter: version 500W only; version 1kW only; version 2kW only
• Electrolink Modular Fm Transmitter: version 3kW only; version 5kW only; version 10kW only; version 15kW only; version 20kW only; version 30kW only; …
• Electrolink Uhf Tv Transmitter: from 10W, up to and including 5kW
• Electrolink Vhf Tv Transmitter: affected versions not specified

Published 2024-04-18. Last modified 2026-06-17.