CVE-2025-63228

CRITICAL
2025-11-18 [email protected]
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 28, 2026 - 19:22 vuln.today
PoC Detected
Dec 08, 2025 - 14:44 vuln.today
Public exploit code
CVE Published
Nov 18, 2025 - 20:15 nvd
CRITICAL 9.8

Tags

File Upload PHP RCE Mozart Next 100 Firmware Mozart Next 1000 Firmware Mozart Next 2000 Firmware Mozart Next 30 Firmware Mozart Next 300 Firmware Mozart Next 3000 Firmware Mozart Next 3500 Firmware Mozart Next 50 Firmware Mozart Next 500 Firmware Mozart Next 6000 Firmware Mozart Next 7000 Firmware Mozart Dds Next 30 Firmware Mozart Dds Next 50 Firmware Mozart Dds Next 100 Firmware Mozart Dds Next 300 Firmware Mozart Dds Next 500 Firmware Mozart Dds Next 1000 Firmware Mozart Dds Next 2000 Firmware Mozart Dds Next 3000 Firmware Mozart Dds Next 3500 Firmware Mozart Dds Next 6000 Firmware Mozart Dds Next 7000 Firmware

Description

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise.

Analysis

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical Context

This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise. Affected products include: Dbbroadcast Mozart Next 100 Firmware, Dbbroadcast Mozart Next 1000 Firmware, Dbbroadcast Mozart Next 2000 Firmware, Dbbroadcast Mozart Next 30 Firmware, Dbbroadcast Mozart Next 300 Firmware.

Affected Products

Dbbroadcast Mozart Next 100 Firmware, Dbbroadcast Mozart Next 1000 Firmware, Dbbroadcast Mozart Next 2000 Firmware, Dbbroadcast Mozart Next 30 Firmware, Dbbroadcast Mozart Next 300 Firmware.

Remediation

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.

Priority Score

70
Low Medium High Critical
KEV: 0
EPSS: +0.7
CVSS: +49
POC: +20

Share

CVE-2025-63228 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy