by Kastro CVE-2025-66254
DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter — Unauthenticated Arbitrary File Deletion (upgrade_contents.php)
Description · from the CVE record
Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary files. The `deleteupgrade` parameter in `/var/www/upgrade_contents.php` allows unauthenticated deletion of arbitrary files in `/var/www/upload/` without any extension restriction or path sanitization, enabling attackers to remove critical system files.
Affected
ProductAffectedFixed inSource
Mozart FM Transmitter30–CNA
Mozart FM Transmitter50–CNA
Mozart FM Transmitter100–CNA
Mozart FM Transmitter300–CNA
Mozart FM Transmitter500–CNA
Mozart FM Transmitter1000–CNA
Mozart FM Transmitter2000–CNA
Mozart FM Transmitter3000–CNA
Mozart FM Transmitter3500–CNA
Mozart FM Transmitter6000–CNA
Mozart FM Transmitter7000–CNA
Scores by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Gridware (CNA)7.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial