CVE-2025-66254CWE-73

CVE-2025-66254

Critical ยท published November 26, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

โšก An attacker can delete arbitrary files with just one malicious parameter! The `deleteupgrade` vulnerability in Mozart FM Transmitter is a heart-stopping oversight that allows unauthenticated file deletion like it's a walk in the park. ๐Ÿ”ฅ Think of a restaurant where anyone can walk into the kitchen and toss anything out without a second thought โ€” that's how this flaw operates. Here, an attacker can clear out critical system files without needing a key or an order of authority! If exploited, an attacker could wipe out essential files, potentially crippling the entire system. This could lead to service outages, loss of important data, and a chaotic scramble for recovery โ€” a nightmare scenario for anyone relying on these transmitters!

Put simply

Think of a restaurant where anyone can walk into the kitchen and toss anything out without a second thought โ€” that's how this flaw operates. Here, an attacker can clear out critical system files without needing a key or an order of authority! The `deleteupgrade` parameter in `/var/www/upgrade_contents.php` allows unauthenticated access to delete any file in `/var/www/upload/`, without any restrictions on file types or paths, making the server dangerously vulnerable to file deletion attacks.

What to do

If exploited, an attacker could wipe out essential files, potentially crippling the entire system. This could lead to service outages, loss of important data, and a chaotic scramble for recovery โ€” a nightmare scenario for anyone relying on these transmitters! To remediate this vulnerability, immediately patch to the latest version or contact DB Electronica for an update. Additionally, implement strict access controls and validate parameters to prevent unauthorized file operations. Conduct a security audit to assess any potential impacts! You've got this! Follow these steps, and you'll tighten up security in no time. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
9.1 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00383 ยท 31.2th percentile
Weakness
CWE-73 ยท External Control of File Name or Path
Published
2025-11-26T06:16Z
Affected products (22)
ProductVersionsFixed in
dbbroadcast/mozart_next_100_firmwareall versionsโ€”
dbbroadcast/mozart_next_1000_firmwareall versionsโ€”
dbbroadcast/mozart_next_2000_firmwareall versionsโ€”
dbbroadcast/mozart_next_30_firmwareall versionsโ€”
dbbroadcast/mozart_next_300_firmwareall versionsโ€”
dbbroadcast/mozart_next_3000_firmwareall versionsโ€”
dbbroadcast/mozart_next_3500_firmwareall versionsโ€”
dbbroadcast/mozart_next_50_firmwareall versionsโ€”
dbbroadcast/mozart_next_500_firmwareall versionsโ€”
dbbroadcast/mozart_next_6000_firmwareall versionsโ€”
dbbroadcast/mozart_next_7000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_30_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_50_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_100_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_300_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_500_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_1000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_2000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_3000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_3500_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_6000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_7000_firmwareall versionsโ€”
References (2)
EPSS history
Timeline
  • 26 NOV 00:37Z
    Unauthenticated Arbitrary File Deletion (upgrade_contents.php)
    cvelistv5