CVE-2024-39376

The vulnerability results from improper access control (CWE-284) in the firmware software of TELSAT marKoni FM transmitters. A remote attacker, without needing to possess an account or any interaction from the victim, can gain access to system resources or functions to which they should not have permissions. The lack of detailed description of the technical mechanism in available sources suggests that the exact nature of the flaw is proprietary or not publicly disclosed.

An attacker can gain unauthorized access to sensitive system information or perform operations beyond granted permissions, which in an industrial environment (ICS) may lead to disruption of FM transmitter operations or unauthorized changes to their configuration.

Patches available from the manufacturer should be applied according to the references. Detailed recommendations regarding firmware updates and additional remedial measures (e.g., network segmentation, restricting network access to ICS devices) are described in the CISA advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01

Firmware software of Markoni Markoni-D (Compact) and Markoni Markoni-Dh (Exciter+Amplifiers) devices — specific versions indicated in manufacturer references and CISA ICS-CERT advisory (ICSA-24-179-01)