CVE Catalog
CVE-2025-66251
CriticalSummary
An unauthenticated attacker can exploit the deletehidden parameter to perform path traversal and delete arbitrary .tgz files on the Mozart FM Transmitter.
Risk Assessment
Risk of deleting important configuration or update files, potentially disrupting device operation.
Recommendation
Secure the endpoint against unauthorized access and implement path validation to prevent traversal.
Original NVD description (English source)
Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletehidden parameter allows path traversal deletion of arbitrary .tgz files.