High · published November 26, 2025
🚨 An unauthenticated file read vulnerability in DB Electronica's Mozart FM Transmitter is a hacker's dream—just a sneaky null byte is enough to access sensitive files! ⚡ Think of it like a restaurant where a waiter blindly serves any dish a customer names, but with a twist: if they sneak in a secret code (the null byte), they can order off the restricted menu, including the chef's special recipes! This vulnerability is absolutely devastating; an attacker could read critical files, including sensitive user data or system configurations, just by manipulating a simple request. Imagine the chaos if your secrets are laid bare because of one sneaky trick!
Think of it like a restaurant where a waiter blindly serves any dish a customer names, but with a twist: if they sneak in a secret code (the null byte), they can order off the restricted menu, including the chef's special recipes! The flaw resides in the `/var/tdf/download_setting.php` endpoint which allows null byte injection via user-controlled input, bypassing file extension restrictions and enabling directory traversal to read arbitrary files. It's all due to how PHP handles null bytes as string terminators, making it possible to access files like `/etc/passwd`.
This vulnerability is absolutely devastating; an attacker could read critical files, including sensitive user data or system configurations, just by manipulating a simple request. Imagine the chaos if your secrets are laid bare because of one sneaky trick! To protect against this, update your DB Electronica software to the latest version immediately, which contains a patch for this vulnerability. Additionally, sanitize user inputs to prevent null byte injection and restrict file read permissions to only what's necessary. 🛡️ You've got this! Follow these steps and you'll keep your files safe and sound. 🌟
| Product | Versions | Fixed in |
|---|---|---|
| dbbroadcast/mozart_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_next_50_firmware | all versions | — |
| dbbroadcast/mozart_next_500_firmware | all versions | — |
| dbbroadcast/mozart_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_next_7000_firmware | all versions | — |
| dbbroadcast/mozart_next_100_firmware | all versions | — |
| dbbroadcast/mozart_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_next_30_firmware | all versions | — |
| dbbroadcast/mozart_next_300_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_30_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_50_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_100_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_300_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_1000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_2000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_3500_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_6000_firmware | all versions | — |
| dbbroadcast/mozart_dds_next_7000_firmware | all versions | — |