high7.5
CVE-2025-67015
Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator passw…
Impact
Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/admin_access_1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comtech | Cdm-625 Firmware | Version 2.5.1 |
| Comtech | Cdm-625a Firmware | Version 2.5.1 |