CVE-2025-51040
HIGH EPSS 27.3%
Published Aug 6, 202510mo ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Aug 6, 2025 10mo ago
Last Modified Jun 17, 2026 2w ago
Description
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None
Threat Intelligence
EPSS Exploit Probability
27.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure
Affected Products 6
| Vendor | Product | Version | Range |
|---|---|---|---|
| electrolink | fm\/dab\/tv_transmitter_web_management_system | 01.07 | any |
| electrolink | fm\/dab\/tv_transmitter_web_management_system | 01.08 | any |
| electrolink | fm\/dab\/tv_transmitter_web_management_system | 01.09 | any |
| electrolink | medium_1kw | * | any |
| electrolink | medium_2kw | * | any |
| electrolink | medium_500w | * | any |
References 1
- github.com https://github.com/p0et08/Electrolink-FM-DAB-TV
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.