Critical ยท published November 26, 2025
๐จ Unauthenticated arbitrary file uploads are back in the spotlight! With CVE-2025-66256, the Mozart FM Transmitter from DB Electronica lets attackers waltz in, bypassing any checks completely! ๐ฅ This vulnerability is like leaving a back door wide open at a concert venue โ anyone can just stroll in with whatever they want, no questions asked, putting everyone at risk. Imagine the chaos if someone sneaks in a dangerous item without any verification! An attacker could upload malicious files without breaking a sweat, potentially leading to remote code execution, data theft, or even a complete system takeover. This could be absolutely devastating for the system's integrity and confidentiality, causing chaos not just for the network but also for all its users. Your entire broadcasting operation could be at risk!
This vulnerability is like leaving a back door wide open at a concert venue โ anyone can just stroll in with whatever they want, no questions asked, putting everyone at risk. Imagine the chaos if someone sneaks in a dangerous item without any verification! This vulnerability resides in the `/var/tdf/patch_contents.php` endpoint of Mozart FM Transmitter versions 30 to 7000, which allows unauthenticated users to upload any file without restrictions. There's no validation for file types, MIME types, or size limits beyond a generous 16MB, making it a playground for attackers.
An attacker could upload malicious files without breaking a sweat, potentially leading to remote code execution, data theft, or even a complete system takeover. This could be absolutely devastating for the system's integrity and confidentiality, causing chaos not just for the network but also for all its users. Your entire broadcasting operation could be at risk! Immediate action is required! Patch to the latest version released by DB Electronica to close off this vulnerability, and implement strict file validation checks at the upload endpoint. Consider adding size restrictions and MIME type checks to harden your defenses against such file upload issues. You've got this! With swift action and a proactive approach, you can shield your system from this vulnerability! ๐ก๏ธ
| Product | Versions | Fixed in |
|---|---|---|
| dbbroadcast/mozart_next_100_firmware | all versions | โ |
| dbbroadcast/mozart_next_1000_firmware | all versions | โ |
| dbbroadcast/mozart_next_2000_firmware | all versions | โ |
| dbbroadcast/mozart_next_30_firmware | all versions | โ |
| dbbroadcast/mozart_next_300_firmware | all versions | โ |
| dbbroadcast/mozart_next_3000_firmware | all versions | โ |
| dbbroadcast/mozart_next_3500_firmware | all versions | โ |
| dbbroadcast/mozart_next_50_firmware | all versions | โ |
| dbbroadcast/mozart_next_500_firmware | all versions | โ |
| dbbroadcast/mozart_next_6000_firmware | all versions | โ |
| dbbroadcast/mozart_next_7000_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_30_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_50_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_100_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_300_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_500_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_1000_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_2000_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_3000_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_3500_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_6000_firmware | all versions | โ |
| dbbroadcast/mozart_dds_next_7000_firmware | all versions | โ |