CRITICAL🇵🇱 Wersja polska

CVE-2025-66257

CVSS 9.2v4.0pub. 2025-11-26upd. 2025-12-03

Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletepatch parameter allows unauthenticated deletion of arbitrary files. The `deletepatch` parameter in `patch_contents.php` allows unauthenticated deletion of arbitrary files in `/var/www/patch/` directory without sanitization or access control checks.

🤖 AI Analysis
How it works

The `patch_contents.php` script accepts a `deletepatch` parameter that specifies a file to be deleted from the `/var/www/patch/` directory. The parameter is not subject to any sanitization or permission verification, which classifies the vulnerability as CWE-73 (External Control of File Name or Path). An attacker can send a crafted HTTP request to the vulnerable endpoint without the need to provide any authentication credentials and force the deletion of selected files from the device's file system.

Impact

An attacker can permanently delete files from the `/var/www/patch/` directory on the device, which may lead to destabilization of FM transmitter operation, loss of updates or configuration files, and consequently to a signal transmission outage. Both data integrity and system availability disruption are possible.

Mitigation & patch

Patches available from the manufacturer should be applied according to the references. Until the fix is implemented, it is recommended to restrict network access to the administrative panel of devices exclusively to trusted IP addresses (e.g., through firewall or network segmentation) and to disable access from the public network.

Who is affected

DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter in versions: 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000.

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Dbbroadcast Mozart Dds Next 100

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 1000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 1000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 100 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 2000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 2000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 30

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 300

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 300 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 30 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3500

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3500 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 50

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 500

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 500 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 50 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 6000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 6000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 7000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 7000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 100

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 1000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 1000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 100 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 2000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 2000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 30

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 300

    HW
    Dbbroadcast
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-66256CRITICAL9.9PL ✓same product

Nieuwierzytelniony arbitrary file upload w DB Electronica Mozart FM Transmitter

CVE-2025-66255CRITICAL9.9PL ✓same product

RCE przez brak walidacji pliku firmware w DB Electronica Mozart FM Transmitter

CVE-2025-66250CRITICAL9.2PL ✓same product

Nieuwierzytelniony arbitrary file upload w DB Electronica Mozart FM Transmitter

CVE-2025-66253CRITICAL9.9PL ✓same product

Nieuwierzytelniony OS Command Injection w DB Electronica Mozart FM Transmitter

CVE-2025-66259CRITICAL9.3PL ✓same product

RCE w nadajnikach FM DB Electronica — brak filtrowania danych wejściowych