Itel DAB Encoder Authentication Bypass

The Itel DAB Encoder is a firmware used in certain devices for digital audio broadcasting. This vulnerability allows attackers to bypass authentication and gain administrative access to any device running the same firmware, even if the passwords and networks are different.

Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Contact Itel directly for a patched version - there's no public patch link in the advisory.
2. Immediate mitigations:
3. Restrict network access to your device (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized token creation

• github.com
• www.itel.it