CVE-2025-28229

Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges

Critical · published April 18, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

🚨 A simple misconfiguration lets anyone waltz into the Orban OPTIMOD 5950 like they've got the VIP pass! 🔥 Think of this as a hotel security system that skips the ID check at the front desk, allowing anyone to stroll straight into the penthouse suite. It's like giving out keys to all the guests without checking their reservations! This vulnerability allows attackers to bypass authentication and gain Administrator privileges, potentially giving them full control over the device. They could alter configurations, interfere with broadcasts, or even disable the system entirely, leading to absolutely devastating consequences for operations.

Put simply

Think of this as a hotel security system that skips the ID check at the front desk, allowing anyone to stroll straight into the penthouse suite. It's like giving out keys to all the guests without checking their reservations! The flaw lies in incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15, which does not properly enforce authentication, allowing unauthorized users to gain high-level admin access.

What to do

This vulnerability allows attackers to bypass authentication and gain Administrator privileges, potentially giving them full control over the device. They could alter configurations, interfere with broadcasts, or even disable the system entirely, leading to absolutely devastating consequences for operations. Immediately update to the latest firmware version to patch this vulnerability. Ensure access controls are thoroughly reviewed and configured correctly to prevent unauthorized access. Regular audits of user privileges can also help mitigate future risks. You've got this! With a quick patch, you can secure your system and maintain your superhero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00793 · 55.9th percentile
Published
2025-04-18T00:00Z
EPSS history
Timeline
  • 18 APR 00:00Z
    Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges
    cvelistv5