CVE-2025-15103CWE-200information-disclosure

CVE-2025-15103

High · published December 30, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

⚡ Just one tiny password flaw, and an attacker can bypass authentication like a thief finding an unlocked door! 🔓 Think of it like a hotel where guests can access rooms with partial keys — if they know just enough, they can sneak in without any trouble. This vulnerability allows attackers to exploit a partial password disclosure to gain unauthorized access. If exploited, an attacker could waltz right past security measures, accessing sensitive data or performing actions as though they belong – it’s a recipe for an absolute disaster! Imagine losing control over your accounts and exposing sensitive information without even needing the full password. Yikes!

Put simply

Think of it like a hotel where guests can access rooms with partial keys — if they know just enough, they can sneak in without any trouble. This vulnerability allows attackers to exploit a partial password disclosure to gain unauthorized access. CVE-2025-15103 allows attackers to bypass authentication by exploiting partial password disclosures, effectively granting unauthorized access to the system.

What to do

If exploited, an attacker could waltz right past security measures, accessing sensitive data or performing actions as though they belong – it’s a recipe for an absolute disaster! Imagine losing control over your accounts and exposing sensitive information without even needing the full password. Yikes! To protect against this vulnerability, make sure to update your systems immediately to the latest version, which addresses this flaw. Additionally, implement stringent password policies to not disclose any part of the password in error messages. Regularly test your authentication mechanisms to reinforce security. You've got this! Follow these steps, and you'll lock down your security tighter than a vault! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-12-30T14:15Z
Affected products (1)
ProductVersionsFixed in
deltaww/dvp-12se11t_firmware< 2.162.16
References (1)
EPSS history
Timeline
  • 30 DEC 08:55Z
    DVP-12SE11T - Authentication Bypass via Partial Password Disclosure
    cvelistv5