Description
Electrolink Transmitter 是一种用于电子通信系统的传输设备，广泛应用于广播电视领域。该设备的 /controlloLogin.js 文件存在信息泄露漏洞，攻击者可以通过该漏洞获取以明文存储的凭证，从而绕过安全限制并访问系统。
Electrolink FM/DAB/TV Transmitter /controlloLogin.js 信息泄露漏洞（CVE-2024-3742）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-3742
https://www.exploit-db.com/exploits/51771
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3742.yaml
https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
https://pentest-tools.com/vulnerabilities-exploits/electrolink-fm-dab-tv-transmitter-controllologinjs-credentials-disclosure_22954
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5790.php
https://packetstormsecurity.com/files/174875/
https://s4e.io/tools/electrolink-fm-dab-tv-transmitter-credential-disclosure-cve-2024-3742
https://www.cybersecurity-help.cz/vdb/vulns/88763/