PT-2025-44641 · Deep Sea Electronics · Dse855

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-29270

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deep Sea Electronics DSE855 versions 1.1.0 through 1.1.26

Description A flaw exists in access control within the realtime.cgi endpoint of Deep Sea Electronics devices. This allows attackers to access the admin panel and gain complete control of the device.

Recommendations Update to a version later than 1.1.26.

Fix

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

CVE-2025-29270

Affected Products

Dse855

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-29270 · Security Note
• https://twitter.com/VulmonFeeds/status/1984313854524809425 · Twitter Post
• https://t.me/CVEtracker/36321 · Telegram Post
• https://twitter.com/CVEnew/status/1984312787032826119 · Twitter Post
• https://blog.byteray.co.uk/shadow-entry-discovery-of-authentication-bypass-vulnerability-in-dse855-communications-device-938e35d4b361 · Note