CVE-2024-3742 Scanner

Electrolink FM/DAB/TV Transmitters are used by broadcasters and telecommunication companies to transmit audio and video signals over the airwaves. These transmitters are critical components in the infrastructure of radio and television stations. Technicians and engineers rely on these devices for their robust and reliable performance. Electrolink transmitters are known for their ability to handle high-frequency signals and ensure clear transmission quality. They are deployed in various locations, including urban and remote areas, to maintain consistent broadcast coverage.

The Electrolink FM/DAB/TV Transmitter has a vulnerability where credentials are stored in clear-text within the controlloLogin.js file. This vulnerability can be exploited by attackers to gain unauthorized access to the transmitter system. The disclosure of these credentials can lead to potential control and manipulation of the transmission settings. The impact of such a breach can be significant, affecting the integrity of broadcast signals.

The vulnerability resides in the controlloLogin.js file of the Electrolink FM/DAB/TV Transmitter. This JavaScript file contains hard-coded credentials in clear-text format. Specifically, the parameters user and password are exposed, making them easily retrievable through a standard HTTP GET request to the vulnerable endpoint. When an attacker accesses this endpoint, they can extract the credentials due to insufficient obfuscation or encryption mechanisms. This flaw is particularly severe as it does not require any prior authentication to exploit.

Exploitation of this vulnerability can lead to unauthorized access to the transmitter's control interface. Malicious actors could modify transmission settings, potentially disrupting broadcast services. Unauthorized access could also lead to further security breaches, including the installation of malicious software or the interception of broadcast content. The integrity and availability of transmitted signals could be severely compromised, leading to significant operational disruptions.

By using the S4E platform, you can ensure that your digital assets are thoroughly scanned for vulnerabilities like the one affecting the Electrolink FM/DAB/TV Transmitter. Our platform provides comprehensive reports, enabling you to take prompt action to secure your systems. Joining S4E grants you access to a wide range of security tools and expert advice to protect your infrastructure. Stay ahead of potential threats with continuous monitoring and receive timely alerts on newly discovered vulnerabilities. Safeguard your broadcast services and maintain uninterrupted operations by becoming a member today.

References:

• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5790.php
• https://nvd.nist.gov/vuln/detail/CVE-2024-3742
• https://packetstormsecurity.com/files/174875/
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02