PT-2025-17299 · Orban · Orban Optimod 5950

Mohamed Shahat · Published 2025-04-18 · Updated 2025-04-18 · CVE-2025-28229

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Orban OPTIMOD 5950 Firmware version 1.0.0.2 Orban OPTIMOD 5950 System version 2.2.15

Description The issue is related to incorrect access control, allowing attackers to bypass authentication and gain Administrator privileges.

Recommendations For Orban OPTIMOD 5950 Firmware version 1.0.0.2, update the firmware to a version that addresses the incorrect access control issue. For Orban OPTIMOD 5950 System version 2.2.15, update the system to a version that addresses the incorrect access control issue.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-28229

Affected Products

Orban Optimod 5950

References · 4

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28229 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-28229 · Security Note
• https://osv.dev/vulnerability/CVE-2025-28229 · Vendor Advisory
• https://twitter.com/CVEnew/status/1913312988213461304 · Twitter Post