CVE-2024-3742

Electrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information

Description

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.

Workaround:

Electrolink has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of the affected products are encouraged to contact Electrolink https://electrolink.com/contacts/ for additional information.

Link	Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

What is the severity of CVE-2024-3742?: CVE-2024-3742 has been scored as a high severity vulnerability.
How to fix CVE-2024-3742?: As a workaround for remediating CVE-2024-3742: Electrolink has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of the affected products are encouraged to contact Electrolink https://electrolink.com/contacts/ for additional information.
Is CVE-2024-3742 being actively exploited in the wild?: It is possible that CVE-2024-3742 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~3% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-3742?: CVE-2024-3742 affects Electrolink Compact DAB Transmitter, Electrolink Medium DAB Transmitter, Electrolink High Power DAB Transmitter, Electrolink Compact FM Transmitter, Electrolink Modular FM Transmitter, Electrolink Digital FM Transmitter, Electrolink VHF TV Transmitter, Electrolink UHF TV Transmitter.