CVE-2025-29270

critical · 10

Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete control of the device.

CVSS

0.3%

EPSS (exploit prob.)

27th

EPSS percentile

2025-10-31

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-200CWE-284

References

https://blog.byteray.co.uk/shadow-entry-discovery-of-authentication-bypass-vulnerability-in-dse855-communications-device-938e35d4b361

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-29270