« Volver al listado

CVE-2024-3741

Estado: AplazadaAlta (8.7)—

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Electrolink — TransmittersAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-3741",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-3741",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-29T18:54:30.103942Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "ics-cert@hq.dhs.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "ics-cert@hq.dhs.gov",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.7,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "Electrolink",
          "product": "Compact DAB Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "10W"
            },
            {
              "status": "affected",
              "version": "100W"
            },
            {
              "status": "affected",
              "version": "250W"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "Medium DAB Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "500W"
            },
            {
              "status": "affected",
              "version": "1kW"
            },
            {
              "status": "affected",
              "version": "2kW"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "High Power DAB Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "2.5kW"
            },
            {
              "status": "affected",
              "version": "3kW"
            },
            {
              "status": "affected",
              "version": "4kW"
            },
            {
              "status": "affected",
              "version": "5kW"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "Compact FM Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "Compact FM Transmitter"
            },
            {
              "status": "affected",
              "version": "500W"
            },
            {
              "status": "affected",
              "version": "1kW"
            },
            {
              "status": "affected",
              "version": "2kW"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "Modular FM Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "3kW"
            },
            {
              "status": "affected",
              "version": "5kW"
            },
            {
              "status": "affected",
              "version": "10kW"
            },
            {
              "status": "affected",
              "version": "15kW"
            },
            {
              "status": "affected",
              "version": "20kW"
            },
            {
              "status": "affected",
              "version": "30kW"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "Digital FM Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "15W",
              "versionType": "custom",
              "lessThanOrEqual": "40kW"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "VHF TV Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "BI"
            },
            {
              "status": "affected",
              "version": "BIII"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Electrolink",
          "product": "UHF TV Transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "10W",
              "versionType": "custom",
              "lessThanOrEqual": "5kW"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:electrolink:medium_dab_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "medium dab transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "2kW"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:uhf_tv_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "uhf tv transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "10W"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:high_power_dab_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "high power dab transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "5kW"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:compact_dab_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "compact dab transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "250W"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:compact_fm_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "compact fm transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "2kW"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:modular_fm_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "modular fm transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "30kW"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:digital_fm_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "digital fm transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "15W"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:electrolink:vhf_tv_transmitter:*:*:*:*:*:*:*:*"
          ],
          "vendor": "electrolink",
          "product": "vhf tv transmitter",
          "versions": [
            {
              "status": "affected",
              "version": "BI"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-18T22:15:10.603",
  "references": [
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-302"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Electrolink transmitters are vulnerable to an authentication bypass \nvulnerability affecting the login cookie. An attacker can set an \narbitrary value except 'NO' to the login cookie and have full system \naccess."
    },
    {
      "lang": "es",
      "value": "Los transmisores Electrolink son afectados una vulnerabilidad de omisión de autenticación que afecta la cookie de inicio de sesión. Un atacante puede establecer un valor arbitrario excepto 'NO' para la cookie de inicio de sesión y tener acceso completo al sistema."
    }
  ],
  "lastModified": "2026-06-17T07:44:55.423",
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}