PT-2025-47394 · Eurolab · Elts100V1.Ubx+1

Published 2025-11-18 · Updated 2026-02-04 · CVE-2025-63225

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eurolab ELTS100 UBX version ELTS100v1.UBX

Description The Eurolab ELTS100 UBX device is subject to Broken Access Control because of a lack of authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without authentication. This allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation.

Recommendations Apply authentication mechanisms to all critical administrative endpoints to prevent unauthorized access and modification of system configurations and firmware.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-63225

Affected Products

Elts100 Ubx

Elts100V1.Ubx

References · 8

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63225_Eurolab_ELTS100_UBX_Broken_Access_Control · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63225 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63225 · Vendor Advisory
• https://twitter.com/CVEnew/status/1991043004832849965 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1991017849654063367 · Twitter Post
• https://t.me/cveNotify/150909 · Telegram Post
• http://eurolab-srl.com · Note
• https://t.me/CVEtracker/37668 · Telegram Post