BaseFortify

Publication date: 2025-11-26

Last updated on: 2025-12-03

Assigner: Gridware

Description

Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary files. The `deleteupgrade` parameter in `/var/www/upgrade_contents.php` allows unauthenticated deletion of arbitrary files in `/var/www/upload/` without any extension restriction or path sanitization, enabling attackers to remove critical system files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-26

Last Modified

2025-12-03

Generated

2026-07-06

AI Q&A

2025-11-26

EPSS Evaluated

2026-07-04

NVD

CVE-2025-66254

Affected Vendors & Products

Vendor	Product	Version / Range
dbbroadcast	mozart_next_100_firmware	*
dbbroadcast	mozart_next_100	*
dbbroadcast	mozart_next_1000_firmware	*
dbbroadcast	mozart_next_1000	*
dbbroadcast	mozart_next_2000_firmware	*
dbbroadcast	mozart_next_2000	*
dbbroadcast	mozart_next_30_firmware	*
dbbroadcast	mozart_next_30	*
dbbroadcast	mozart_next_300_firmware	*
dbbroadcast	mozart_next_300	*
dbbroadcast	mozart_next_3000_firmware	*
dbbroadcast	mozart_next_3000	*
dbbroadcast	mozart_next_3500_firmware	*
dbbroadcast	mozart_next_3500	*
dbbroadcast	mozart_next_50_firmware	*
dbbroadcast	mozart_next_50	*
dbbroadcast	mozart_next_500_firmware	*
dbbroadcast	mozart_next_500	*
dbbroadcast	mozart_next_6000_firmware	*
dbbroadcast	mozart_next_6000	*
dbbroadcast	mozart_next_7000_firmware	*
dbbroadcast	mozart_next_7000	*
dbbroadcast	mozart_dds_next_30_firmware	*
dbbroadcast	mozart_dds_next_30	*
dbbroadcast	mozart_dds_next_50_firmware	*
dbbroadcast	mozart_dds_next_50	*
dbbroadcast	mozart_dds_next_100_firmware	*
dbbroadcast	mozart_dds_next_100	*
dbbroadcast	mozart_dds_next_300_firmware	*
dbbroadcast	mozart_dds_next_300	*
dbbroadcast	mozart_dds_next_500_firmware	*
dbbroadcast	mozart_dds_next_500	*
dbbroadcast	mozart_dds_next_1000_firmware	*
dbbroadcast	mozart_dds_next_1000	*
dbbroadcast	mozart_dds_next_2000_firmware	*
dbbroadcast	mozart_dds_next_2000	*
dbbroadcast	mozart_dds_next_3000_firmware	*
dbbroadcast	mozart_dds_next_3000	*
dbbroadcast	mozart_dds_next_3500_firmware	*
dbbroadcast	mozart_dds_next_3500	*
dbbroadcast	mozart_dds_next_6000_firmware	*
dbbroadcast	mozart_dds_next_6000	*
dbbroadcast	mozart_dds_next_7000_firmware	*
dbbroadcast	mozart_dds_next_7000	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

This vulnerability is an unauthenticated arbitrary file deletion issue in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter software versions 30 through 7000. Specifically, the 'deleteupgrade' parameter in the upgrade_contents.php script allows an attacker to delete arbitrary files located in the /var/www/upload/ directory without any restrictions on file extensions or path sanitization. This means an attacker can remove critical system files without needing to authenticate.

Impact Analysis

This vulnerability can allow an attacker to delete important files on the affected system, potentially disrupting the normal operation of the software or the system itself. Since the deletion is unauthenticated and unrestricted, it could lead to denial of service, loss of data, or compromise of system stability.

Hi! I’m here to help you understand CVE-2025-66254. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70