CVE-2025-51040

Published: Aug 6, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2.

Affected (3)

Products: Electrolink: Fm/dab/tv Transmitter Web Management System

Electrolink

1 product

Fm/dab/tv Transmitter Web Management System

Configuration A

3 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Electrolink Fm/dab/tv Transmitter Web Management System	Version 01.07
Electrolink Fm/dab/tv Transmitter Web Management System	Version 01.08
Electrolink Fm/dab/tv Transmitter Web Management System	Version 01.09

Running on/with	Platform Versions
Electrolink Medium 1kw	All versions
Electrolink Medium 2kw	All versions
Electrolink Medium 500w	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://github.com/p0et08/Electrolink-FM-DAB-TV

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.