PT-2025-48107 · Db Elettronica Telecomunicazioni Spa · Mozart Fm Transmitter

Abdul Mhanni · Published 2025-11-26 · Updated 2025-12-24 · CVE-2025-66255

Positive Technologies (AI Summary)

CVSS v4.0

9.9

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000

Description An unauthenticated arbitrary file upload issue exists in the upgrade contents.php component of the software. The firmware upgrade endpoint accepts arbitrary file uploads without validating file headers, cryptographic signatures, or enforcing .tgz format requirements, which allows for malicious firmware injection and subsequent remote code execution. The upgrade contents.php endpoint is vulnerable.

Recommendations Versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000 should be updated to a fixed version. As a temporary workaround, restrict access to the upgrade contents.php endpoint.

Exploit

Fix

RCE

Insufficient Verification of Data Authenticity

Unrestricted File Upload

Weakness Enumeration

CWE-345

CWE-434

Related Identifiers

CVE-2025-66255

Affected Products

Mozart Fm Transmitter

References · 7

• 🔥 https://abdulmhsblog.com/posts/webfmvulns · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-66255 · Security Note
• https://t.me/CVEtracker/38246 · Telegram Post
• https://twitter.com/SecReportCVE/status/2003874342313054250 · Twitter Post
• https://t.me/cveNotify/144300 · Telegram Post
• https://twitter.com/CVEnew/status/1993513525587689661 · Twitter Post
• https://twitter.com/dailycve/status/1996310670636195878 · Twitter Post