CVE-2024-3741

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 18, 2024
Updated: Apr 19, 2024
CWE ID 302

Summary

CVE-2024-3741 is an authentication bypass vulnerability affecting Electrolink transmitters. The vulnerability allows an attacker to bypass the login cookie and gain full system access by setting an arbitrary value, except 'NO', to the login cookie. This vulnerability has a base severity rating of HIGH and a base score of 7.5 according to ICS-CERT. It has a CVSS vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, indicating that the attack vector is through the network and the impact on integrity is high. The potential danger posed to organizations is significant, as it allows unauthorized access to sensitive systems. To remediate this vulnerability, organizations should apply any available patches or updates provided by Electrolink to address the authentication bypass issue.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-3741 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options