PT-2025-53595 · Comtech Ef Data · Cdm-625A+1

Shiky8 · Published 2025-12-26 · Updated 2026-01-02 · CVE-2025-67015

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem version 2.5.1

Description A flaw in access control within the Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem firmware allows attackers to modify the Administrator password and gain elevated privileges. This is achieved by submitting a specially crafted POST request to the /Forms/admin access 1 API endpoint. The vulnerability allows unauthorized modification of administrative credentials.

Recommendations Apply updates to address the access control issue in the affected modem firmware version 2.5.1.

Exploit

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-67015

Affected Products

Cdm-625

Cdm-625A

References · 8

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67015%20_%20Comtech%20EF%20Data%20CDM-625%20_%20CDM-625A%20Advanced%20_%20Broken%20Access%20Control · Exploit
• https://osv.dev/vulnerability/CVE-2025-67015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67015 · Security Note
• https://twitter.com/cracbot/status/2006319487969374426 · Twitter Post
• https://t.me/cveNotify/147523 · Telegram Post
• https://twitter.com/CVEnew/status/2004666616294916350 · Twitter Post
• https://comtechefdata.com · Note
• https://t.me/CVEtracker/40724 · Telegram Post