PT-2025-44641 · Deep Sea Electronics · Dse855

CVE-2025-29270 · Publicado 2025-10-31 · Atualizado 2025-10-31

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deep Sea Electronics DSE855 versions 1.1.0 through 1.1.26

Description A flaw exists in access control within the realtime.cgi endpoint of Deep Sea Electronics devices. This allows attackers to access the admin panel and gain complete control of the device.

Recommendations Update to a version later than 1.1.26.

Correção

Information Disclosure

Improper Access Control

Enumeração de Fraquezas

CWE-200

CWE-284

Identificadores relacionados

CVE-2025-29270

Produtos afetados

Dse855

Referências · 5

• https://twitter.com/VulmonFeeds/status/1984313854524809425 · Publicação no Twitter
• https://t.me/CVEtracker/36321 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-29270 · Nota de Segurança
• https://twitter.com/CVEnew/status/1984312787032826119 · Publicação no Twitter
• https://blog.byteray.co.uk/shadow-entry-discovery-of-authentication-bypass-vulnerability-in-dse855-communications-device-938e35d4b361 · Nota