Yüksek CVSS 7.2 PoC var
CVE-2025-63227: Mozart Next 100 Firmware: tehlikeli dosya yükleme
Açıklama (NVD)
The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This allows the attacker to execute arbitrary commands on the server, potentially leading to full system compromise.
Özet bilgiler
- Ürün
- Dbbroadcast Mozart Next 100 Firmware
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,61 (yüzdelik 49)
- CWE
- CWE-434
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dbbroadcast-mozart-next-100-firmware | — | — | — |
| dbbroadcast-mozart-next-1000-firmware | — | — | — |
| dbbroadcast-mozart-next-2000-firmware | — | — | — |
| dbbroadcast-mozart-next-30-firmware | — | — | — |
| dbbroadcast-mozart-next-300-firmware | — | — | — |
| dbbroadcast-mozart-next-3000-firmware | — | — | — |
| dbbroadcast-mozart-next-3500-firmware | — | — | — |
| dbbroadcast-mozart-next-50-firmware | — | — | — |
| dbbroadcast-mozart-next-500-firmware | — | — | — |
| dbbroadcast-mozart-next-6000-firmware | — | — | — |
| dbbroadcast-mozart-next-7000-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-30-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-50-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-100-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-300-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-500-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-1000-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-2000-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-3000-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-3500-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-6000-firmware | — | — | — |
| dbbroadcast-mozart-dds-next-7000-firmware | — | — | — |