CVE Vulnerabilities

CVE-2024-3741

Authentication Bypass by Assumed-Immutable Data

Published: Apr 18, 2024 | Modified: Apr 18, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except NO to the login cookie and have full system access.

Weakness

The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

Potential Mitigations

References