PT-2025-53595 · Comtech Ef Data · Cdm-625A+1

Shiky8 · Publicado 2025-12-26 · Atualizado 2026-01-02 · CVE-2025-67015

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem version 2.5.1

Description A flaw in access control within the Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem firmware allows attackers to modify the Administrator password and gain elevated privileges. This is achieved by submitting a specially crafted POST request to the /Forms/admin access 1 API endpoint. The vulnerability allows unauthorized modification of administrative credentials.

Recommendations Apply updates to address the access control issue in the affected modem firmware version 2.5.1.

Exploit

Correção

LPE

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2025-67015

Produtos afetados

Cdm-625

Cdm-625A

Referências · 8

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67015%20_%20Comtech%20EF%20Data%20CDM-625%20_%20CDM-625A%20Advanced%20_%20Broken%20Access%20Control · Exploit
• https://twitter.com/cracbot/status/2006319487969374426 · Publicação no Twitter
• https://t.me/cveNotify/147523 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-67015 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-67015 · Nota de Segurança
• https://twitter.com/CVEnew/status/2004666616294916350 · Publicação no Twitter
• https://comtechefdata.com · Nota
• https://t.me/CVEtracker/40724 · Publicação no Telegram