CRITICAL🇵🇱 Wersja polska

CVE-2025-66250

CVSS 9.2v4.0pub. 2025-11-26upd. 2025-12-03

Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Allows unauthenticated arbitrary file upload via /var/tdf/status_contents.php.

🤖 AI Analysis
How it works

The vulnerability is classified as CWE-434 (Unrestricted Upload of File with Dangerous Type) and affects the /var/tdf/status_contents.php endpoint in the device's web interface. An attacker can send an HTTP request to this endpoint without providing any credentials and upload any file — including potentially executable payloads (e.g., webshell). The lack of authentication mechanisms and file validation makes the attack possible directly from the network without any user interaction.

Impact

An attacker can upload a malicious file (e.g., webshell or other payload) and gain the ability to execute code remotely (RCE) on the broadcasting device, which may lead to broadcast disruption, takeover of FM transmitter control, and potential compromise of systems associated with broadcasting infrastructure.

Mitigation & patch

Apply patches available from the manufacturer according to references. Until updates are deployed, it is recommended to isolate the device management interface from the public network, restrict access to the /var/tdf/status_contents.php endpoint at the firewall level, and implement network authentication (e.g., VPN) for administrative panel access.

Who is affected

Firmware of DB Electronica Telecomunicazioni S.p.A. Mozart FM transmitters in versions: 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 (Mozart Next and Mozart DDS Next product lines)

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Dbbroadcast Mozart Dds Next 100

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 1000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 1000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 100 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 2000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 2000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 30

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 300

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 300 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 30 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3500

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3500 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 50

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 500

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 500 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 50 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 6000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 6000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 7000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 7000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 100

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 1000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 1000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 100 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 2000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 2000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 30

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 300

    HW
    Dbbroadcast
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-66257CRITICAL9.2PL ✓same product

Nieuwierzytelnione usuwanie plików w DB Electronica Mozart FM Transmitter

CVE-2025-66253CRITICAL9.9PL ✓same product

Nieuwierzytelniony OS Command Injection w DB Electronica Mozart FM Transmitter

CVE-2025-66256CRITICAL9.9PL ✓same product

Nieuwierzytelniony arbitrary file upload w DB Electronica Mozart FM Transmitter

CVE-2025-66255CRITICAL9.9PL ✓same product

RCE przez brak walidacji pliku firmware w DB Electronica Mozart FM Transmitter

CVE-2025-66259CRITICAL9.3PL ✓same product

RCE w nadajnikach FM DB Electronica — brak filtrowania danych wejściowych