CVE-2025-66259
critical · 9.3Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in main_ok.php user supplied data/hour/time is passed directly into date shell command
9.3
CVSS
0.7%
EPSS (exploit prob.)
50th
EPSS percentile
2025-11-26
Published
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dbbroadcast | mozart_next_100_firmware | all versions |
| dbbroadcast | mozart_next_100 | all versions |
| dbbroadcast | mozart_next_1000_firmware | all versions |
| dbbroadcast | mozart_next_1000 | all versions |
| dbbroadcast | mozart_next_2000_firmware | all versions |
| dbbroadcast | mozart_next_2000 | all versions |
| dbbroadcast | mozart_next_30_firmware | all versions |
| dbbroadcast | mozart_next_30 | all versions |
| dbbroadcast | mozart_next_300_firmware | all versions |
| dbbroadcast | mozart_next_300 | all versions |
| dbbroadcast | mozart_next_3000_firmware | all versions |
| dbbroadcast | mozart_next_3000 | all versions |
| dbbroadcast | mozart_next_3500_firmware | all versions |
| dbbroadcast | mozart_next_3500 | all versions |
| dbbroadcast | mozart_next_50_firmware | all versions |
| dbbroadcast | mozart_next_50 | all versions |
| dbbroadcast | mozart_next_500_firmware | all versions |
| dbbroadcast | mozart_next_500 | all versions |
| dbbroadcast | mozart_next_6000_firmware | all versions |
| dbbroadcast | mozart_next_6000 | all versions |
| dbbroadcast | mozart_next_7000_firmware | all versions |
| dbbroadcast | mozart_next_7000 | all versions |
| dbbroadcast | mozart_dds_next_30_firmware | all versions |
| dbbroadcast | mozart_dds_next_30 | all versions |
| dbbroadcast | mozart_dds_next_50_firmware | all versions |
| dbbroadcast | mozart_dds_next_50 | all versions |
| dbbroadcast | mozart_dds_next_100_firmware | all versions |
| dbbroadcast | mozart_dds_next_100 | all versions |
| dbbroadcast | mozart_dds_next_300_firmware | all versions |
| dbbroadcast | mozart_dds_next_300 | all versions |
| dbbroadcast | mozart_dds_next_500_firmware | all versions |
| dbbroadcast | mozart_dds_next_500 | all versions |
| dbbroadcast | mozart_dds_next_1000_firmware | all versions |
| dbbroadcast | mozart_dds_next_1000 | all versions |
| dbbroadcast | mozart_dds_next_2000_firmware | all versions |
| dbbroadcast | mozart_dds_next_2000 | all versions |
| dbbroadcast | mozart_dds_next_3000_firmware | all versions |
| dbbroadcast | mozart_dds_next_3000 | all versions |
| dbbroadcast | mozart_dds_next_3500_firmware | all versions |
| dbbroadcast | mozart_dds_next_3500 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-66259