CVE-2025-25037

CVE-2025-25037 affects Aquatronica Controller System firmware versions ≤ 5.1.6 and web interface ≤ 2.0. The issue arises from unauthenticated access to the tcp.php endpoint, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration data, including plaintext adm...

CVE-2025-25037: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions = 5.1.6 and web interface versions = 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration...

PT-2025-26455

Name of the Vulnerable Software and Affected Versions: Aquatronica Controller System firmware versions = 5.1.6 Aquatronica Controller System web interface versions = 2.0 Description: An information disclosure issue exists, allowing remote attackers to issue crafted POST requests to the "tcp.php"...

Aquatronica Control System 5.1.6 - Information Disclosure

!/usr/bin/env python -- coding: utf-8 -- Aquatronica Control System 5.1.6 Passwords Leak Vulnerability Vendor: Aquatronica s.r.l. Product web page: https://www.aquatronica.com Affected version: Firmware: 5.1.6 Web: 2.0 Summary: Aquatronica's electronic AQUARIUM CONTROLLER is easy to use, allowing...