Critical · published November 26, 2025
🚨 A single unassuming URL can let an attacker execute any command they want! This critical vulnerability in DB Electronica's Mozart FM Transmitter is waiting to be exploited. 🔥 Think of `/var/tdf/restore_settings.php` as a restaurant where anyone can walk in and give orders directly to the chef — except there are no checks on what they can ask for. If a malicious visitor figured out the right phrase, they could ask for anything from a gourmet meal to a kitchen disaster! An attacker armed with this exploit could unleash complete chaos, running any command they desire on your server. This could lead to data breaches, unauthorized access, or even a full system takeover, making this vulnerability absolutely devastating!
Think of `/var/tdf/restore_settings.php` as a restaurant where anyone can walk in and give orders directly to the chef — except there are no checks on what they can ask for. If a malicious visitor figured out the right phrase, they could ask for anything from a gourmet meal to a kitchen disaster! This vulnerability allows unauthenticated OS command injection via the `name` parameter in the `restore_settings.php` file. The lack of validation means that any injected shell commands can be executed by the web server, leading to remote code execution.
An attacker armed with this exploit could unleash complete chaos, running any command they desire on your server. This could lead to data breaches, unauthorized access, or even a full system takeover, making this vulnerability absolutely devastating! Immediately update to the latest patched version of the Mozart FM Transmitter. Strongly consider implementing input validation to sanitize the `name` parameter and prevent command injection. Regularly review your server's security posture and set up monitoring for any unusual activity. You've got this! By following these remediation steps, you'll be well on your way to securing your system in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| dbbroadcast/mozart_next_100_firmware | all versions | — |
| dbbroadcast/mozart_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_next_30_firmware | all versions | — |
| dbbroadcast/mozart_next_300_firmware | all versions | — |
| dbbroadcast/mozart_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_next_50_firmware | all versions | — |
| dbbroadcast/mozart_next_500_firmware | all versions | — |
| dbbroadcast/mozart_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_next_7000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_30_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_50_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_100_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_300_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_7000_firmware | all versions | — |