First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-39376

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

TELSAT marKoni FM Transmitters are vulnerable to users gaining unauthorized access to sensitive information or performing actions beyond their designated permissions.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
marKoni	Markoni-D (Compact) FM Transmitters	< 2.0.1
marKoni	Markoni-DH (Exciter+Amplifiers) FM Transmitters	< 2.0.1
markoni	markoni-d_fm_transmitter	< 2.0.1
markoni	markoni-dh_fm_transmitter	< 2.0.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-01Third Party Advisory, US Government Resource

Timeline

Published: Jun 27, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-393777.8Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe CVE-2024-393787.8Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut CVE-2024-393795.5Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen CVE-2024-39386.1The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patch, and as such it ca CVE-2024-393807.8After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary co CVE-2024-393817.8After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe CVE-2024-393825.5After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensiti CVE-2024-393837.8Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability th CVE-2024-393847.8Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code exec CVE-2024-393855.5Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive mem CVE-2024-393867.8Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executio CVE-2024-393875.5Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive me