CVE-2025-61235

An issue was discovered in Dataphone A920 v2025.07.161103

Critical · published October 28, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

🚨 A crafty attacker could exploit a lack of validation in Dataphone A920, and the results could be alarming! 🔥 Think of it like a restaurant that accepts any reservation request without checking if the guest is on the list. This means anyone could walk in and snag a table, disrupting the dining experience for everyone else! An attacker can send a specially crafted packet that the device improperly accepts, triggering functionality without any authentication. This could lead to unauthorized access to sensitive operations and potentially devastating effects on system integrity!

Put simply

Think of it like a restaurant that accepts any reservation request without checking if the guest is on the list. This means anyone could walk in and snag a table, disrupting the dining experience for everyone else! This vulnerability arises from the device's failure to validate incoming packets properly, allowing arbitrary or trivial data to be accepted where it shouldn't. The result? Functionality is activated without necessary checks, leaving the system exposed.

What to do

An attacker can send a specially crafted packet that the device improperly accepts, triggering functionality without any authentication. This could lead to unauthorized access to sensitive operations and potentially devastating effects on system integrity! To mitigate this risk, immediately patch Dataphone A920 to the latest version, which should address the packet validation issue. Review your network configurations to limit exposure and consider implementing additional access controls to prevent unauthorized packet submission. You've got this! With these steps, you can secure your device and keep the digital dining experience safe! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00391 · 32.0th percentile
Published
2025-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    An issue was discovered in Dataphone A920 v2025.07.161103
    cvelistv5