Strix
26.1K

CVE-2025-66252

HIGHCVSS 8.4/10EPSS 0.32%

Last modified

CVE-2025-66252 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. EPSS estimates a 0.32% chance of exploitation in the next 30 days.

Description

Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the fact that the unlink operation is done in a while loop; if an immutable file is specified or otherwise a file in which the process has no permissions to delete; it would repeatedly attempt to do in a loop.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 4.0
8.4/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability
0.32%

23.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
DbbroadcastMozart Next 100 FirmwareAll versions
DbbroadcastMozart Next 1000 FirmwareAll versions
DbbroadcastMozart Next 2000 FirmwareAll versions
DbbroadcastMozart Next 30 FirmwareAll versions
DbbroadcastMozart Next 300 FirmwareAll versions
DbbroadcastMozart Next 3000 FirmwareAll versions
DbbroadcastMozart Next 3500 FirmwareAll versions
DbbroadcastMozart Next 50 FirmwareAll versions
DbbroadcastMozart Next 500 FirmwareAll versions
DbbroadcastMozart Next 6000 FirmwareAll versions
DbbroadcastMozart Next 7000 FirmwareAll versions
DbbroadcastMozart Dds Next 30 FirmwareAll versions
DbbroadcastMozart Dds Next 50 FirmwareAll versions
DbbroadcastMozart Dds Next 100 FirmwareAll versions
DbbroadcastMozart Dds Next 300 FirmwareAll versions
DbbroadcastMozart Dds Next 500 FirmwareAll versions
DbbroadcastMozart Dds Next 1000 FirmwareAll versions
DbbroadcastMozart Dds Next 2000 FirmwareAll versions
DbbroadcastMozart Dds Next 3000 FirmwareAll versions
DbbroadcastMozart Dds Next 3500 FirmwareAll versions
DbbroadcastMozart Dds Next 6000 FirmwareAll versions
DbbroadcastMozart Dds Next 7000 FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-66252?
Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the fact that the unlink operation is done in a while loop; if an immutable file is specified or otherwise a file in which the process has no permissions to delete; it would repeatedly attempt to do in a loop.
How severe is CVE-2025-66252?
CVE-2025-66252 has a CVSS score of 8.4/10 (HIGH severity). The EPSS model estimates a 0.32% probability of exploitation in the next 30 days.
How do I fix CVE-2025-66252?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-66252?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST