CVE-2025-6763

Katalog CVE

CVSS 8.1 · High EPSS 1,4%

Kerentanan Improper Authentication pada cometsystem t7611 firmware, cometsystem t4511 firmware +8 lainnya. Skor CVSS 3.1 8.1 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. Affected by this issue is some unknown functionality of the file /setupA.cfg of the component Web-based Management Interface. Performing manipulation results in missing authentication. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used. There are still doubts about whether this vulnerability truly exists. The vendor explains, that "[d]evices described at CVE are not intended to be exposed into internet and proper security of devices is to end-users."

Rincian

Terbit di NVD

27 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication
CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/zeke2997/CVE_request_comet_system exploit · advisory pihak ketiga
• https://github.com/zeke2997/CVE_request_comet_system#poc exploit · advisory pihak ketiga
• https://vuldb.com/?id.314074 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.599848 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.314074 permissions required · vdb entry