CVE-2025-66251: mozart next 100 firmware Version not applicable in the source CPE; +22 more affected products

Affected technology

mozart next 100 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 1000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 2000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 30 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 300 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 3000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 3500 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 50 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 500 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 6000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart next 7000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 30 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 50 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 100 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 300 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 500 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 1000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 2000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 3000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 3500 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 6000 firmware · Version not applicable in the source CPE
dbbroadcast

mozart dds next 7000 firmware · Version not applicable in the source CPE
dbbroadcast

Mozart FM Transmitter · 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000
DB Electronica Telecomunicazioni S.p.A.

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker can perform The deletehidden parameter allows path traversal deletion of arbitrary .tgz files. Source advisory’s CVSS 4.0 assessment (base score 7.7/10) rates confidentiality impact as none; integrity and availability impact as low.