{"id":"CVE-2024-3741","aliases":["EUVD-2024-32315","GHSA-hhcp-6v36-gh75"],"status":"published","title":"Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data","description":"Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00492,"percentile":0.42576,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-302"],"published":"2024-04-18T22:04:46Z","modified":"2026-06-17T07:44:55Z","products":[{"vendor":"electrolink","product":"compact dab transmitter"},{"vendor":"electrolink","product":"compact fm transmitter"},{"vendor":"electrolink","product":"digital fm transmitter"},{"vendor":"electrolink","product":"high power dab transmitter"},{"vendor":"electrolink","product":"medium dab transmitter"},{"vendor":"electrolink","product":"modular fm transmitter"},{"vendor":"electrolink","product":"uhf tv transmitter"},{"vendor":"electrolink","product":"vhf tv transmitter"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3741"},{"url":"https://github.com/advisories/GHSA-hhcp-6v36-gh75"}],"sources":{"cve":[{"id":"CVE-2024-3741","title":"Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data","description":"Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess.","status":"published","published":"2024-04-18T22:04:46.3Z","modified":"2024-08-01T20:20:01.174Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-302"],"updated_at":"2026-11-02T14:34:10.613319Z"}],"euvd":[{"id":"EUVD-2024-32315","description":"Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess.","status":"published","published":"2024-04-18T22:04:46Z","modified":"2024-08-01T20:20:01Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T03:50:38.460826Z"}],"ghsa":[{"id":"GHSA-hhcp-6v36-gh75","title":"Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the...","description":"Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess.\n\n","status":"published","published":"2024-04-19T00:30:54Z","modified":"2024-04-19T00:31:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-302"],"updated_at":"2026-11-02T14:57:13.502248Z"}],"nvd":[{"id":"CVE-2024-3741","description":"Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess.","status":"published","published":"2024-04-18T22:15:10.603Z","modified":"2026-06-17T07:44:55.423Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-302"],"updated_at":"2026-11-02T14:09:53.50104Z"}]}}