CVE-2024-22186: Electrolink Compact Dab Transmitter

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.

Affected products

• Electrolink Compact Dab Transmitter: version 10W only; version 100W only; version 250W only; version 10w only; version 100w only; version 250w only
• Electrolink Compact Fm Transmitter: version 500W only; version 1kW only; version 2kW only; version 500w only; version 1kw only; version 2kw only
• Electrolink Digital Fm Transmitter: from 15W, up to and including 40kW; version 15w only
• Electrolink High Power Dab Transmitter: version 2.5kW only; version 3kW only; version 4kW only; version 5kW only; version 2.5kw only; version 3kw only; …
• Electrolink Medium Dab Transmitter: version 500W only; version 1kW only; version 2kW only; version 1kw only; version 2kw only; version 500w only
• Electrolink Modular Fm Transmitter: version 3kW only; version 5kW only; version 10kW only; version 15kW only; version 20kW only; version 30kW only; …
• Electrolink Uhf Tv Transmitter: from 10W, up to and including 5kW; version 10w only
• Electrolink Vhf Tv Transmitter

Published 2024-04-18. Last modified 2026-06-17.