Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2
Electrolink FM/DAB/TV Transmitter web management system is vulnerable to Unauthorized access.An attacker can enter the backend by visiting /FrameSetCore.html, leading to unauthorized administrative access and complete system compromise.
Electrolink
Product: Electrolink FM/DAB/TV Transmitter Web Management System
/FrameSetCore.html
Insecure Permissions
An unauthenticated attacker can access the /FrameSetCore.html file via HTTP, which compromises system security and could lead to unauthorized access.
/FrameSetCore.html
1 Access Control: Restrict access to sensitive files using authentication mechanisms. 2 Code Refactoring: Remove hard-coded credentials from JavaScript files. 3 Data Masking: Avoid storing sensitive information in client-side resources. 4 Security Review: Conduct a thorough security audit to detect similar vulnerabilities. 5 Monitoring & Alerts: Implement monitoring and alerting for unauthorized access attempts.