PT-2025-17303 · Unknown · Electrolink 500W

Mohamed Shahat

·

CVE-2025-28228

·

Published

2025-04-18

·

Updated

2025-04-30

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web versions v01.07 through v01.09 Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Display versions v1.2 through v1.4
Description A credential exposure issue allows unauthorized attackers to access credentials in plaintext.
Recommendations For Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web versions v01.07 through v01.09, update to a version that fixes the credential exposure issue. For Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Display versions v1.2 through v1.4, update to a version that fixes the credential exposure issue.

Exploit

Fix

Insufficiently Protected Credentials

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-28228

Affected Products

Electrolink 500W