CVE-2025-0674
CRITICAL EXPLOITED NUCLEIElber Signum DVB-S/S2 IRD < 1.999 - Authentication Bypass via Password Management Endpoint
Title source: llmExploitation Summary
CVE-2025-0674 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.
Description
Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized administrative access to protected areas of the application, compromising the device's system security.
Nuclei Templates (1)
Elber ESE DVB-S/S2 - Authentication Bypass
CRITICALVERIFIEDby DhiyaneshDK
FOFA:
title="Elber Satellite Equipment" || body="www.elber.it"
References (1)
Core 1
Core References
Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03
Scores
CVSS v3
9.8
EPSS
0.0380
EPSS Percentile
88.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
VulnCheck KEV
2025-07-18
CWE
CWE-288
Status
published
Products (5)
Elber/Cleber/3 Broadcast Multi-Purpose Platform
1.0
Elber/ESE DVB-S/S2 Satellite Receiver
< 1.5.179
Elber/Reble610 M/ODU XPIC IP-ASI-SDH
0.01
Elber/Signum DVB-S/S2 IRD
< 1.999
Elber/Wayber Analog/Digital Audio STL
4
Published
Feb 07, 2025
Tracked Since
Feb 18, 2026