CVE-2025-63212

The GatesAir Flexiva-LX solid-state FM transmitters (models LX100, LX300, LX600, and LX1000 ) are vulnerable on firmware versions 1.0.13 and 2.0 . The root cause is a publicly accessible log file at /log/Flexiva%20LX.log that exposes sensitive session identifiers (sid ). An unauthenticated attack...