CVE-2025-63225
CRITICAL
INFO
Priority: 0.06
BB Relevance:
80/100
Published: 2025-11-18
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any form of authentication. This vulnerability allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| eurolab-srl | elts_100_firmware | elts100v1.ubx |
References & Advisories (2)
Product
Exploit
Mitigation
Third Party Advisory