CVE-2025-67014CWE-284broken-access-control

CVE-2025-67014

High · published December 26, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

🚨 A little oversight, and an attacker can stroll right into your admin area! This access control issue in the DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System lets anyone access sensitive endpoints without any authentication. 🔥 Think of your home security — if the front door is wide open, anyone can just walk in without a key, right? This vulnerability is like that front door without a lock, inviting unwanted guests into your most private spaces. An unauthenticated attacker could gain complete access to sensitive administrative functions, leading to full control over the system. This means they could modify settings, access confidential data, and potentially cause absolute chaos in your infrastructure! 🚨

Put simply

Think of your home security — if the front door is wide open, anyone can just walk in without a key, right? This vulnerability is like that front door without a lock, inviting unwanted guests into your most private spaces. The vulnerability stems from incorrect access control, allowing attackers to reach an administrative endpoint without the need for authentication. This is a critical oversight that compromises the security of the system!

What to do

An unauthenticated attacker could gain complete access to sensitive administrative functions, leading to full control over the system. This means they could modify settings, access confidential data, and potentially cause absolute chaos in your infrastructure! 🚨 To mitigate this risk, immediately patch the system to the latest version provided by DEV Systemtechnik GmbH. Additionally, review your access control policies to ensure that no administrative functions can be accessed without proper authentication. It's crucial to implement robust security measures! You've got this! By following these steps, you'll reinforce your defenses and keep the bad guys out. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-12-26T21:15Z
Affected products (1)
ProductVersionsFixed in
axing/dev7113_firmwareall versions—
References (2)
EPSS history
Timeline
  • 26 DEC 00:00Z
    Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an…
    cvelistv5