CVE-2025-66256CWE-434unrestricted-file-upload

CVE-2025-66256

Critical ยท published November 26, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

๐Ÿšจ Unauthenticated arbitrary file uploads are back in the spotlight! With CVE-2025-66256, the Mozart FM Transmitter from DB Electronica lets attackers waltz in, bypassing any checks completely! ๐Ÿ”ฅ This vulnerability is like leaving a back door wide open at a concert venue โ€” anyone can just stroll in with whatever they want, no questions asked, putting everyone at risk. Imagine the chaos if someone sneaks in a dangerous item without any verification! An attacker could upload malicious files without breaking a sweat, potentially leading to remote code execution, data theft, or even a complete system takeover. This could be absolutely devastating for the system's integrity and confidentiality, causing chaos not just for the network but also for all its users. Your entire broadcasting operation could be at risk!

Put simply

This vulnerability is like leaving a back door wide open at a concert venue โ€” anyone can just stroll in with whatever they want, no questions asked, putting everyone at risk. Imagine the chaos if someone sneaks in a dangerous item without any verification! This vulnerability resides in the `/var/tdf/patch_contents.php` endpoint of Mozart FM Transmitter versions 30 to 7000, which allows unauthenticated users to upload any file without restrictions. There's no validation for file types, MIME types, or size limits beyond a generous 16MB, making it a playground for attackers.

What to do

An attacker could upload malicious files without breaking a sweat, potentially leading to remote code execution, data theft, or even a complete system takeover. This could be absolutely devastating for the system's integrity and confidentiality, causing chaos not just for the network but also for all its users. Your entire broadcasting operation could be at risk! Immediate action is required! Patch to the latest version released by DB Electronica to close off this vulnerability, and implement strict file validation checks at the upload endpoint. Consider adding size restrictions and MIME type checks to harden your defenses against such file upload issues. You've got this! With swift action and a proactive approach, you can shield your system from this vulnerability! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00437 ยท 37.0th percentile
Weakness
CWE-434 ยท Unrestricted Upload of File with Dangerous Type
Published
2025-11-26T06:16Z
Affected products (22)
ProductVersionsFixed in
dbbroadcast/mozart_next_100_firmwareall versionsโ€”
dbbroadcast/mozart_next_1000_firmwareall versionsโ€”
dbbroadcast/mozart_next_2000_firmwareall versionsโ€”
dbbroadcast/mozart_next_30_firmwareall versionsโ€”
dbbroadcast/mozart_next_300_firmwareall versionsโ€”
dbbroadcast/mozart_next_3000_firmwareall versionsโ€”
dbbroadcast/mozart_next_3500_firmwareall versionsโ€”
dbbroadcast/mozart_next_50_firmwareall versionsโ€”
dbbroadcast/mozart_next_500_firmwareall versionsโ€”
dbbroadcast/mozart_next_6000_firmwareall versionsโ€”
dbbroadcast/mozart_next_7000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_30_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_50_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_100_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_300_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_500_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_1000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_2000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_3000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_3500_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_6000_firmwareall versionsโ€”
dbbroadcast/mozart_dds_next_7000_firmwareall versionsโ€”
References (2)
EPSS history
Timeline
  • 26 NOV 00:41Z
    Unauthenticated Arbitrary File Upload (patch_contents.php)
    cvelistv5