{"id":"CVE-2024-22179","aliases":["EUVD-2024-19775","GHSA-3v49-294p-4c7w"],"status":"published","title":"Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data","description":"The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00391,"percentile":0.33661,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-302"],"published":"2024-04-18T22:06:26Z","modified":"2026-06-17T07:10:52Z","products":[{"vendor":"electrolink","product":"compact dab transmitter"},{"vendor":"electrolink","product":"compact fm transmitter"},{"vendor":"electrolink","product":"digital fm transmitter"},{"vendor":"electrolink","product":"high power dab transmitter"},{"vendor":"electrolink","product":"medium dab transmitter"},{"vendor":"electrolink","product":"modular fm transmitter"},{"vendor":"electrolink","product":"uhf tv transmitter"},{"vendor":"electrolink","product":"vhf tv transmitter"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22179"},{"url":"https://github.com/advisories/GHSA-3v49-294p-4c7w"}],"sources":{"cve":[{"id":"CVE-2024-22179","title":"Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data","description":"The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.","status":"published","published":"2024-04-18T22:06:26.781Z","modified":"2024-08-01T22:35:34.937Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-302"],"updated_at":"2026-11-02T14:34:00.254134Z"}],"euvd":[{"id":"EUVD-2024-19775","description":"The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.","status":"published","published":"2024-04-18T22:06:26Z","modified":"2024-08-01T22:35:34Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T03:50:29.401303Z"}],"ghsa":[{"id":"GHSA-3v49-294p-4c7w","title":"\nThe application is vulnerable to an unauthenticated parameter \nmanipulation that allows an...","description":"\nThe application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.\n\n","status":"published","published":"2024-04-19T00:30:54Z","modified":"2024-04-19T00:31:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-302"],"updated_at":"2026-11-02T14:57:13.502248Z"}],"nvd":[{"id":"CVE-2024-22179","description":"The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.","status":"published","published":"2024-04-18T22:15:09.85Z","modified":"2026-06-17T07:10:52.773Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-302"],"updated_at":"2026-11-02T14:09:53.50104Z"}]}}