CVE-2024-3741

Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbitrary value except 'NO' to the login cookie and have full system access.

View graph Watch Export

CVSS v3.1

7.5 HIGH

EPSS

0.49%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityHIGH

AvailabilityNONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Connections

1 relationships

CWE-302

source

Timeline

disclosure → media coverage

Apr 18, 2024

Disclosure — published as a CVE record. · last revised by NVD Apr 15, 2026