CVE-2025-66254

🗓️ 26 Nov 2025 01:16:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 3 Views

CVE-2025-66254 allows unauthenticated deletion of arbitrary files via deleteupgrade in upgrade_contents.php on Mozart Transmitter models.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-66254	26 Nov 202503:48	–	circl
CNNVD	DB Electronica Mozart FM Transmitter 安全漏洞	26 Nov 202500:00	–	cnnvd
CVE	CVE-2025-66254	26 Nov 202500:37	–	cve
Cvelist	CVE-2025-66254 Unauthenticated Arbitrary File Deletion (upgrade_contents.php)	26 Nov 202500:37	–	cvelist
EUVD	EUVD-2025-199678	26 Nov 202503:30	–	euvd
Positive Technologies	PT-2025-48106	26 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-66254	27 Nov 202500:58	–	redhatcve
Vulnrichment	CVE-2025-66254 Unauthenticated Arbitrary File Deletion (upgrade_contents.php)	26 Nov 202500:37	–	vulnrichment

NVD

Node

dbbroadcast mozart_next_100_firmwareMatch-

AND

dbbroadcast mozart_next_100Match-

Node

dbbroadcast mozart_next_1000_firmwareMatch-

AND

dbbroadcast mozart_next_1000Match-

Node

dbbroadcast mozart_next_2000_firmwareMatch-

AND

dbbroadcast mozart_next_2000Match-

Node

dbbroadcast mozart_next_30_firmwareMatch-

AND

dbbroadcast mozart_next_30Match-

Node

dbbroadcast mozart_next_300_firmwareMatch-

AND

dbbroadcast mozart_next_300Match-

Node

dbbroadcast mozart_next_3000_firmwareMatch-

AND

dbbroadcast mozart_next_3000Match-

Node

dbbroadcast mozart_next_3500_firmwareMatch-

AND

dbbroadcast mozart_next_3500Match-

Node

dbbroadcast mozart_next_50_firmwareMatch-

AND

dbbroadcast mozart_next_50Match-

Node

dbbroadcast mozart_next_500_firmwareMatch-

AND

dbbroadcast mozart_next_500Match-

Node

dbbroadcast mozart_next_6000_firmwareMatch-

AND

dbbroadcast mozart_next_6000Match-

Node

dbbroadcast mozart_next_7000_firmwareMatch-

AND

dbbroadcast mozart_next_7000Match-

Node

dbbroadcast mozart_dds_next_30_firmwareMatch-

AND

dbbroadcast mozart_dds_next_30Match-

Node

dbbroadcast mozart_dds_next_50_firmwareMatch-

AND

dbbroadcast mozart_dds_next_50Match-

Node

dbbroadcast mozart_dds_next_100_firmwareMatch-

AND

dbbroadcast mozart_dds_next_100Match-

Node

dbbroadcast mozart_dds_next_300_firmwareMatch-

AND

dbbroadcast mozart_dds_next_300Match-

Node

dbbroadcast mozart_dds_next_500_firmwareMatch-

AND

dbbroadcast mozart_dds_next_500Match-

Node

dbbroadcast mozart_dds_next_1000_firmwareMatch-

AND

dbbroadcast mozart_dds_next_1000Match-

Node

dbbroadcast mozart_dds_next_2000_firmwareMatch-

AND

dbbroadcast mozart_dds_next_2000Match-

Node

dbbroadcast mozart_dds_next_3000_firmwareMatch-

AND

dbbroadcast mozart_dds_next_3000Match-

Node

dbbroadcast mozart_dds_next_3500_firmwareMatch-

AND

dbbroadcast mozart_dds_next_3500Match-

Node

dbbroadcast mozart_dds_next_6000_firmwareMatch-

AND

dbbroadcast mozart_dds_next_6000Match-

Node

dbbroadcast mozart_dds_next_7000_firmwareMatch-

AND

dbbroadcast mozart_dds_next_7000Match-

Source	Link
abdulmhsblog	www.abdulmhsblog.com/posts/webfmvulns/

03 Dec 2025 16:47Current

CVSS 3.19.1

CVSS 47.8

EPSS0.0011

unauthenticated deletion arbitrary files upgrade contents deleteupgrade parameter mozart transmitter upgrade script web path critical files