CVE-2024-58277

R Radio Network FM Transmitter 1.07 allows unauthenticated attackers to access the admin user's password through the system.cgi endpoint, enabling authentication bypass and FM station setup access.

CVSS

No CVSS.

References

Link	Resource
https://www.exploit-db.com/exploits/51855
https://www.vulncheck.com/advisories/r-radio-network-fm-transmitter-107-system-settings-disclosure
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5802.php

Configurations

No configuration.

History

26 Sep 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) R Radio Network FM Transmitter 1.07 permite a atacantes no autenticados acceder a la contraseña del usuario administrador a través del endpoint system.cgi, lo que permite la omisión de autenticación y el acceso a la configuración de la estación FM.

Information

Published : 2025-12-04 21:16

Updated : 2026-09-26 21:10

NVD link : CVE-2024-58277

Mitre link : CVE-2024-58277

CVE.ORG link : CVE-2024-58277

JSON object : View

Products Affected

No product.

CWE

CWE-312

Cleartext Storage of Sensitive Information

{"id": "CVE-2024-58277", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-58277", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-05T16:06:27.717343Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "R Radio Network", "product": "Radio Network FM Transmitter", "versions": [{"status": "affected", "version": "1.07", "lessThan": "1.09", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-04T21:16:07.700", "references": [{"url": "https://www.exploit-db.com/exploits/51855", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/r-radio-network-fm-transmitter-107-system-settings-disclosure", "source": "disclosure@vulncheck.com"}, {"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5802.php", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-312"}]}], "descriptions": [{"lang": "en", "value": "R Radio Network FM Transmitter 1.07 allows unauthenticated attackers to access the admin user's password through the system.cgi endpoint, enabling authentication bypass and FM station setup access."}, {"lang": "es", "value": "R Radio Network FM Transmitter 1.07 permite a atacantes no autenticados acceder a la contrase\u00f1a del usuario administrador a trav\u00e9s del endpoint system.cgi, lo que permite la omisi\u00f3n de autenticaci\u00f3n y el acceso a la configuraci\u00f3n de la estaci\u00f3n FM."}], "lastModified": "2026-09-26T21:10:00.130", "sourceIdentifier": "disclosure@vulncheck.com"}