CVE-2025-63225

Опубликовано: 18 нояб. 2025

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any form of authentication. This vulnerability allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation.

Ссылки

http://eurolab-srl.com/
Product
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63225_Eurolab_ELTS100_UBX_Broken_Access_Control
Exploit
Third Party Advisory
Mitigation

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:eurolab-srl:elts_100_firmware:elts100v1.ubx:*:*:*:*:*:*:*

cpe:2.3:h:eurolab-srl:elts_100:e118:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.0059

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

GHSA-jc9r-v5h3-q7gw