CVE-2025-45422CWE-284broken-access-control

CVE-2025-45422

High · published July 10, 2026

CVSS v3.1

8.1

EPSS

Percentile

37.9

In the wild

Unconfirmed

What it is

Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and make arbitrary changes to port forwarding rules.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00448 · 37.9th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2026-07-10T01:16Z

References (4)

http://b-box.com · [email protected]http://proximus.com · [email protected]https://github.com/Cedrico03/CVE-2025-45422---Bbox · [email protected]https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:C/MC:H/MI:H/MA:H&version=3.1 · [email protected]

EPSS history

Timeline

09 JUL 00:00Z
Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and make arbitrary changes to port forwarding…
cvelistv5