CRITICAL🇵🇱 Wersja polska

CVE-2025-66259

CVSS 9.3v4.0pub. 2025-11-26upd. 2025-12-03

Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in main_ok.php user supplied data/hour/time is passed directly into date shell command

🤖 AI Analysis
How it works

In the main_ok.php file, user-supplied data (date, time, duration) is passed directly to the system shell 'date' command without proper validation or sanitization. An attacker with access to the application interface can inject malicious system commands (command injection), which will be executed in the context of root privileges. This is a case of CWE-20 — improper input validation leading to command injection.

Impact

An attacker can execute arbitrary system commands with root privileges on the vulnerable device, resulting in complete takeover of the FM transmitter and potential access to further network resources.

Mitigation & patch

Apply patches available from the manufacturer according to the references. Until the fix is implemented, it is recommended to restrict access to the device management interface only to trusted IP addresses and require strong authentication.

Who is affected

DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter in versions: 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Dbbroadcast Mozart Dds Next 100

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 1000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 1000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 100 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 2000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 2000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 30

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 300

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 300 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 30 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3500

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 3500 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 50

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 500

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 500 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 50 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 6000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 6000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 7000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Dds Next 7000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 100

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 1000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 1000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 100 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 2000

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 2000 Firmware

    OS
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 30

    HW
    Dbbroadcast
    all versions

  • Dbbroadcast Mozart Next 300

    HW
    Dbbroadcast
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2025-66256CRITICAL9.9PL ✓same product

Nieuwierzytelniony arbitrary file upload w DB Electronica Mozart FM Transmitter

CVE-2025-66255CRITICAL9.9PL ✓same product

RCE przez brak walidacji pliku firmware w DB Electronica Mozart FM Transmitter

CVE-2025-66250CRITICAL9.2PL ✓same product

Nieuwierzytelniony arbitrary file upload w DB Electronica Mozart FM Transmitter

CVE-2025-66253CRITICAL9.9PL ✓same product

Nieuwierzytelniony OS Command Injection w DB Electronica Mozart FM Transmitter

CVE-2025-66257CRITICAL9.2PL ✓same product

Nieuwierzytelnione usuwanie plików w DB Electronica Mozart FM Transmitter