Electrolink vulnerabilities
We track 7 vulnerabilities in Electrolink products across 9 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2025.
Latest Electrolink vulnerabilities
- 7.5 High severity
Fm/dab/tv Transmitter Web Management System: Exposure of Sensitive Information to an Unauthorized Actor
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2.
- 7.5 High severity
Fm/dab/tv Transmitter Web Management System: Insufficiently Protected Credentials
A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext.
- 8.8 High severity
Compact DAB Transmitter: Reliance on Cookies without Validation and Integrity Checking
The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator.
- 7.5 High severity
Compact DAB Transmitter: Reliance on Cookies without Validation and Integrity Checking
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.
- 7.5 High severity
Compact DAB Transmitter: Missing Authentication for Critical Functionality
The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flash
- 7.5 High severity
Compact DAB Transmitter: Authentication Bypass by Assumed-Immutable Data
Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.
- 7.5 High severity
Compact DAB Transmitter: Authentication Bypass by Assumed-Immutable Data
The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.