CVE-2024-3741 in Compact DAB Transmitter

Résumé

par MITRE • 19/04/2024

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: ICS-CERT
• Réserver: 12/04/2024
• Divulgation: 19/04/2024
• Modérer: accepté
• Entrée: VDB-260968
• CPE: prêt
• CWE: CWE-302 (confirmé)
• CVSS: 7.5 (CNA)
• EPSS: 0.00492
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-3741
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-3741
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-3741/