CVE-2025-25037

CVE-2025-25037 affects Aquatronica Controller System firmware versions ≤ 5.1.6 and web interface ≤ 2.0. The issue arises from unauthenticated access to the tcp.php endpoint, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration data, including plaintext adm...

PT-2025-26455

Name of the Vulnerable Software and Affected Versions: Aquatronica Controller System firmware versions = 5.1.6 Aquatronica Controller System web interface versions = 2.0 Description: An information disclosure issue exists, allowing remote attackers to issue crafted POST requests to the "tcp.php"...