← Advisories

Electrolink FM/DAB/TV Transmitter Vertical Privilege Escalation

High
Advisory ID
ZSL-2023-5793
Release Date
30 September 2023
Vendor
Electrolink s.r.l. - https://www.electrolink.com
Affected Version
10W, 100W, 250W, Compact DAB Transmitter, 500W, 1kW, 2kW Medium DAB Transmitter, 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter, 100W, 500W, 1kW, 2kW Compact FM Transmitter, 3kW, 5kW, 10kW, 15kW, 20kW, 30kW Modular FM Transmitter, 15W - 40kW Digital FM Transmitter, BI, BIII VHF TV Transmitter, 10W - 5kW UHF TV Transmitter, Web version: 01.09, 01.08, 01.07, Display version: 1.4, 1.2, Control unit version: 01.06, 01.04, 01.03, Firmware version: 2.1
Tested On
Mbedthis-Appweb/12.5.0, Mbedthis-Appweb/12.0.0
Summary

Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpass Filters (FM, DAB, ATV, DTV), Channel combiners (FM, DAB, ATV, DTV), Motorized coaxial switches, Manual patch panels, RF power meters, Rigid line and accessories. A professional solution that meets broadcasters needs from small community television or radio to big government networks.

Compact DAB Transmitters 10W, 100W and 250W models with 3.5" touch-screen display and in-built state of the art DAB modulator, EDI input and GPS receiver. All transmitters are equipped with a state-of-the art DAB modulator with excellent performances, self-protected and self-controlled amplifiers ensure trouble-free non-stop operation.

100W, 500W, 1kW and 2kW power range available on compact 2U and 3U 19" frame. Built-in stereo coder, touch screen display and efficient low noise air cooling system. Available models: 3kW, 5kW, 10kW, 15kW, 20kW and 30kW. High efficiency FM transmitters with fully broadband solid state amplifiers and an efficient low-noise air cooling system.

FM digital modulator with excellent specifications, built-in stereo and RDS coder. Digital deviation limiter together with ASI and SDI inputs are available. These transmitters are ready for ISOFREQUENCY networks.

Available for VHF BI and VHF BIII operation with robust desing and user-friendly local and remote control. Multi-standard UHF TV transmitters from 10W up to 5kW with efficient low noise air cooling system. Analogue PAL, NTSC and Digital DVB-T/T2, ATSC and ISDB-Tb available.

Description

The application suffers from a privilege escalation vulnerability. An attacker can escalate his privileges by poisoning the Cookie from GUEST to ADMIN to effectively become Administrator or poisoning to ZSL to become Super Administrator.

Proof of Concept
Disclosure Timeline
30.06.2023Vulnerability discovered.
02.07.2023Vendor contacted.
16.08.2023No response from the vendor.
17.08.2023Vendor contacted.
29.09.2023No response from the vendor.
30.09.2023Public security advisory released.
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
30.09.2023Initial release
03.11.2023Added reference [1] and [2]
14.02.2024Added reference [3]
17.04.2024Added reference [4], [5] and [6]