CVE-2025-66259

🗓️ 26 Nov 2025 00:46:51Reported by GridwareType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

Remote code execution on Mozart FM Transmitter devices via main_ok.php by passing user data to date.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-66259	26 Nov 202507:33	–	circl
CNNVD	DB Electronica Mozart FM Transmitter has a security vulnerability	26 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-66259 Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters	26 Nov 202500:46	–	cvelist
EUVD	EUVD-2025-199669	26 Nov 202500:46	–	euvd
NVD	CVE-2025-66259	26 Nov 202501:16	–	nvd
Positive Technologies	PT-2025-48113	26 Nov 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-66259: Improper Input Validation	26 Nov 202500:00	–	rapid7
RedhatCVE	CVE-2025-66259	27 Nov 202500:58	–	redhatcve
Vulnrichment	CVE-2025-66259 Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters	26 Nov 202500:46	–	vulnrichment

NVD

Node

AND

dbbroadcast mozart_next_100_firmwareMatch-

dbbroadcast mozart_next_100Match-

Node

AND

dbbroadcast mozart_next_1000_firmwareMatch-

dbbroadcast mozart_next_1000Match-

Node

AND

dbbroadcast mozart_next_2000_firmwareMatch-

dbbroadcast mozart_next_2000Match-

Node

AND

dbbroadcast mozart_next_30_firmwareMatch-

dbbroadcast mozart_next_30Match-

Node

AND

dbbroadcast mozart_next_300_firmwareMatch-

dbbroadcast mozart_next_300Match-

Node

AND

dbbroadcast mozart_next_3000_firmwareMatch-

dbbroadcast mozart_next_3000Match-

Node

AND

dbbroadcast mozart_next_3500_firmwareMatch-

dbbroadcast mozart_next_3500Match-

Node

AND

dbbroadcast mozart_next_50_firmwareMatch-

dbbroadcast mozart_next_50Match-

Node

AND

dbbroadcast mozart_next_500_firmwareMatch-

dbbroadcast mozart_next_500Match-

Node

AND

dbbroadcast mozart_next_6000_firmwareMatch-

dbbroadcast mozart_next_6000Match-

Node

AND

dbbroadcast mozart_next_7000_firmwareMatch-

dbbroadcast mozart_next_7000Match-

Node

AND

dbbroadcast mozart_dds_next_30_firmwareMatch-

dbbroadcast mozart_dds_next_30Match-

Node

AND

dbbroadcast mozart_dds_next_50_firmwareMatch-

dbbroadcast mozart_dds_next_50Match-

Node

AND

dbbroadcast mozart_dds_next_100_firmwareMatch-

dbbroadcast mozart_dds_next_100Match-

Node

AND

dbbroadcast mozart_dds_next_300_firmwareMatch-

dbbroadcast mozart_dds_next_300Match-

Node

AND

dbbroadcast mozart_dds_next_500_firmwareMatch-

dbbroadcast mozart_dds_next_500Match-

Node

AND

dbbroadcast mozart_dds_next_1000_firmwareMatch-

dbbroadcast mozart_dds_next_1000Match-

Node

AND

dbbroadcast mozart_dds_next_2000_firmwareMatch-

dbbroadcast mozart_dds_next_2000Match-

Node

AND

dbbroadcast mozart_dds_next_3000_firmwareMatch-

dbbroadcast mozart_dds_next_3000Match-

Node

AND

dbbroadcast mozart_dds_next_3500_firmwareMatch-

dbbroadcast mozart_dds_next_3500Match-

Node

AND

dbbroadcast mozart_dds_next_6000_firmwareMatch-

dbbroadcast mozart_dds_next_6000Match-

Node

AND

dbbroadcast mozart_dds_next_7000_firmwareMatch-

dbbroadcast mozart_dds_next_7000Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Mozart FM Transmitter",
    "vendor": "DB Electronica Telecomunicazioni S.p.A.",
    "versions": [
      {
        "status": "affected",
        "version": "30"
      },
      {
        "status": "affected",
        "version": "50"
      },
      {
        "status": "affected",
        "version": "100"
      },
      {
        "status": "affected",
        "version": "300"
      },
      {
        "status": "affected",
        "version": "500"
      },
      {
        "status": "affected",
        "version": "1000"
      },
      {
        "status": "affected",
        "version": "2000"
      },
      {
        "status": "affected",
        "version": "3000"
      },
      {
        "status": "affected",
        "version": "3500"
      },
      {
        "status": "affected",
        "version": "6000"
      },
      {
        "status": "affected",
        "version": "7000"
      }
    ]
  }
]

Source	Link
abdulmhsblog	www.abdulmhsblog.com/posts/webfmvulns/

Parameter	Position	Path	Description	CWE
data	query param	/main_ok.php	User-supplied data/hour/time parameters are passed directly into a shell command, leading to Remote Code Execution.	CWE-20
hour	query param	/main_ok.php	User-supplied data/hour/time parameters are passed directly into a shell command, leading to Remote Code Execution.	CWE-20
time	query param	/main_ok.php	User-supplied data/hour/time parameters are passed directly into a shell command, leading to Remote Code Execution.	CWE-20

18 Oct 2026 20:10Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

CVSS 49.3

EPSS0.00707

SSVC

CWE-20

Mozart FM Transmitter Remote code execution Main ok file Date shell command User input