by Kastro
Paper/Archive/CVE-2025-66259

CVE-2025-66259

DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter — Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.3.533 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in main_ok.php user supplied data/hour/time is passed directly into date shell command

Affected

ProductAffectedFixed inSource
Mozart FM Transmitter30–CNA
Mozart FM Transmitter50–CNA
Mozart FM Transmitter100–CNA
Mozart FM Transmitter300–CNA
Mozart FM Transmitter500–CNA
Mozart FM Transmitter1000–CNA
Mozart FM Transmitter2000–CNA
Mozart FM Transmitter3000–CNA
Mozart FM Transmitter3500–CNA
Mozart FM Transmitter6000–CNA
Mozart FM Transmitter7000–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Gridware (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

exploitabdulmhsblog.com/posts/webfmvulns