CVE-2025-67015: Improper Access Control

Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/adminaccess1...

CVE-2025-67015

The Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 is vulnerable to an incorrect access control flaw. An attacker can send a crafted POST request to the /Forms/admin_access_1 endpoint to change the Administrator password and escalate privileges . Proof-of-concept...