Which products and versions are affected by CVE-2024-3742?

Affected: Compact DAB Transmitter versions >= 10W; Compact FM Transmitter versions >= Compact FM Transmitter; Digital FM Transmitter versions >= 15W, among others. The full list is in the CVE brief.

Is CVE-2024-3742 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2024-3742 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2024-3742?

No public exploit code is known.

Is there a fix for CVE-2024-3742?

No fixed version is listed yet; check the vendor advisory for mitigations.

How urgently should CVE-2024-3742 be patched?

Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.

Request A Demo

Vulnerability Intelligence

CVE-2024-3742

High

Electrolink transmitters store credentials in clear-text.

Published Apr 19, 2024 · Updated Aug 1, 2024

Key Facts

Patch in the next maintenance window

CVE-2024-3742 is a high-severity vulnerability (CVSS 8.7 v4) affecting Compact DAB Transmitter, Compact FM Transmitter, Digital FM Transmitter and 5 more products.
It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
EPSS estimates a 1.4% probability of exploitation in the next 30 days.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.

CVSS v4

8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (30-day exploit likelihood)

1.4%

Higher than 72.3% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

None known

Get the full CVE-2024-3742 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.

Affected Products

8 affected entries in total

Product	Affected versions	Fixed in
Compact DAB Transmitter	>= 10W	n/a
Compact FM Transmitter	>= Compact FM Transmitter	n/a
Digital FM Transmitter	>= 15W	n/a
High Power DAB Transmitter	>= 2.5kW	n/a
Medium DAB Transmitter	>= 500W	n/a

3 more affected products in the full CVE brief

Timeline

Publicly disclosed
Apr 19, 2024
Last updated
Aug 1, 2024

Weakness Type

CWE-312 Cleartext Storage of Sensitive Information

References

advisoryhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
advisoryUSOM advisory

FAQ

Common Questions.

Electrolink transmitters store credentials in clear-text.
Affected: Compact DAB Transmitter versions >= 10W; Compact FM Transmitter versions >= Compact FM Transmitter; Digital FM Transmitter versions >= 15W, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.

Is CVE-2024-3742 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.