Dbbroadcast Mozart Next 3000 Firmware vulnerabilities

17 CVEs affecting Dbbroadcast Mozart Next 3000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-66263, published 2025-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-66261, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-66253, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an…
CVE-2025-66262, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-63228, published 2025-11-18. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by…
CVE-2025-66259, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500,…
CVE-2025-63227, published 2025-11-18. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative…
CVE-2025-66251, published 2025-11-26. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-66256, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-66250, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-66263, published 2025-11-26. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…

Latest

CVE-2025-66260, published 2025-11-26. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to…
CVE-2025-66258, published 2025-11-26. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to…
CVE-2025-66257, published 2025-11-26. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-66255, published 2025-11-26. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows…
CVE-2025-66254, published 2025-11-26. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000…