Advisories · Technology
DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter.
Every CVE that names DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.9 High
Unauthenticated Arbitrary File Read via Null Byte Injection
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- CWE-158
- CVSS 9.3 CriticalCritical · CVSS 9+
Arbitrary File Overwrite via Tar Extraction Path Traversal
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Unauthenticated OS Command Injection (restore_settings.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Command injection
- CVSS 7.2 High
PostgreSQL SQL Injection (status_sql.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- CWE-20
- CVSS 7.1 High
Stored Cross-Site Scripting via XML Injection
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Cross-site scripting (XSS)
- CVSS 9.2 CriticalCritical · CVSS 9+
Unauthenticated Arbitrary File Deletion (patch_contents.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Unauthenticated Arbitrary File Upload (patch_contents.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Unrestricted file upload
- CVSS 9.9 CriticalCritical · CVSS 9+
Unauthenticated Arbitrary File Upload (upgrade_contents.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- CWE-345
- CVSS 7.8 High
Unauthenticated Arbitrary File Deletion (upgrade_contents.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Unauthenticated OS Command Injection (start_upgrade.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Command injection
- CVSS 8.4 High
Infinite Loop Denial of Service via Failed File Deletion
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Denial of service
- CVSS 7.7 High
Unauthenticated Path Traversal with Arbitrary File Deletion
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Path traversal
- CVSS 9.2 CriticalCritical · CVSS 9+
Unauthenticated Arbitrary File Upload (status_contents.php)
- DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter
- Unrestricted file upload