PT-2025-48104 · Db Elettronica Telecomunicazioni Spa · Mozart Fm Transmitter

Abdul Mhanni · Published 2025-11-26 · Updated 2025-12-03 · CVE-2025-66252

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000

Description An infinite loop leading to a denial of service can occur due to a failed file deletion. This happens when the unlink() function fails within a while loop in the status contents.php file. If an immutable file is specified, or the process lacks the necessary permissions to delete a file, the unlink() operation will repeatedly attempt to execute, resulting in an infinite loop and causing a denial of service.

Recommendations Versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000 should be updated to a version that addresses this issue.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2025-66252

Affected Products

Mozart Fm Transmitter

References · 6

• 🔥 https://abdulmhsblog.com/posts/webfmvulns · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-66252 · Security Note
• https://twitter.com/dailycve/status/1996317921208054042 · Twitter Post
• https://t.me/cveNotify/144042 · Telegram Post
• https://t.me/cveNotify/144297 · Telegram Post
• https://t.me/CVEtracker/38243 · Telegram Post