Electrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flash, or internal flash program memory. This file system serves as the basis for the HTTP2 web server module, but is also used by the SNMP module and is available to other applications that require basic read-only storage capabilities. This can be exploited to overwrite the flash program memory that holds the web server's main interfaces and execute arbitrary code.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Electrolink Compact DAB Transmitter
10W, 100W, 250W
- Electrolink Medium DAB Transmitter
500W, 1kW, 2kW
- Electrolink High Power DAB Transmitter
2.5kW, 3kW, 4kW, 5kW
- Electrolink Compact FM Transmitter
500W, 1kW, 2kW
- Electrolink Modular FM Transmitter
3kW, 5kW, 10kW, 15kW, 20kW, 30kW
- Electrolink Digital FM Transmitter
From 15W · through 40kW
- Electrolink VHF TV Transmitter
BI, BIII
- Electrolink UHF TV Transmitter
From 10W · through 5kW