CVE-2025-28235

An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Models Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext...

CVE-2025-28235

An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Models Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext...

CVE-2025-28235

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12515 2025-04-18 19:37:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6wwrxi2 2025-04-18...

CVE-2025-28235

An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Models Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext...

CVE-2025-28235

CVE-2025-28235 affects Soundcraft Ui Series Ui12/Ui16 firmware 1.0.5x–1.0.7x, with a vulnerability in /socket.io/1/websocket/ that can expose Administrator credentials in plaintext. Root cause is an information disclosure vulnerability in the specified websocket endpoint. Documents do not provide...