CVE-2024-22179: Electrolink Compact Dab Transmitter

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.

Affected products

• Electrolink Compact Dab Transmitter: version 10W only; version 100W only; version 250W only; version 10w only; version 100w only; version 250w only
• Electrolink Compact Fm Transmitter: version 500W only; version 1kW only; version 2kW only; version 500w only; version 1kw only; version 2kw only
• Electrolink Digital Fm Transmitter: from 15W, up to and including 40kW; from 15w, up to and including 40kw
• Electrolink High Power Dab Transmitter: version 2.5kW only; version 3kW only; version 4kW only; version 5kW only; version 2.5kw only; version 3kw only; …
• Electrolink Medium Dab Transmitter: version 500W only; version 1kW only; version 2kW only; version 500w only; version 1kw only; version 2kw only
• Electrolink Modular Fm Transmitter: version 3kW only; version 5kW only; version 10kW only; version 15kW only; version 20kW only; version 30kW only; …
• Electrolink Uhf Tv Transmitter: from 10W, up to and including 5kW; from 10w, up to and including 5kw
• Electrolink Vhf Tv Transmitter

Published 2024-04-18. Last modified 2026-06-17.