CVE-2025-67015CWE-284broken-access-control

CVE-2025-67015

High · published December 26, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

⚡ A sneaky POST request is all it takes to reset the Administrator password on Comtech EF Data's CDM-625 / CDM-625A satellite modem! This means that anyone with a bit of know-how could waltz right in and take control! Think of it like a hotel with a defective lock on the admin office door. If a clever guest realizes they can slip a note under the door instead of using a key, they can access the entire register and make any changes they want! If an attacker exploits this vulnerability, they could change the Administrator password, gaining full access to the system. This means they could manipulate settings, download sensitive data, or even disrupt services—an absolute nightmare for any organization relying on this modem!

Put simply

Think of it like a hotel with a defective lock on the admin office door. If a clever guest realizes they can slip a note under the door instead of using a key, they can access the entire register and make any changes they want! This vulnerability arises from incorrect access control in the firmware of the Comtech EF Data CDM-625 / CDM-625A. By sending a crafted POST request to /Forms/admin_access_1, an attacker can escalate privileges to administrator level without proper authentication.

What to do

If an attacker exploits this vulnerability, they could change the Administrator password, gaining full access to the system. This means they could manipulate settings, download sensitive data, or even disrupt services—an absolute nightmare for any organization relying on this modem! To mitigate this risk, update the modem firmware to the latest version as soon as possible. Ensure that access controls are properly configured and limit access to sensitive endpoints. Regularly audit your system to ensure no vulnerabilities are present. You've got this! By taking these steps, you're one step closer to securing your network and becoming a security hero! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-12-26T21:15Z
Affected products (2)
ProductVersionsFixed in
comtech/cdm-625_firmwareall versions—
comtech/cdm-625a_firmwareall versions—
References (2)
EPSS history
Timeline
  • 26 DEC 00:00Z
    Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator…
    cvelistv5