Listen to this Post
How the CVE works:
The vulnerability exists in the `patch_contents.php` file of the Mozart FM Transmitter web interface. This script is accessible without any authentication. It includes a parameter named `deletepatch` that specifies a file to delete within the `/var/www/patch/` directory. The parameter value is not sanitized, allowing directory traversal sequences. An attacker can manipulate this parameter to reference files outside the intended directory. For example, using `../../../etc/passwd` targets system files. The server processes the request without access control checks. This leads to arbitrary file deletion with web server privileges. The flaw results from missing input validation and authentication mechanisms. Attackers can exploit it remotely via HTTP GET or POST requests. The deletion operation is immediate and irreversible. Affected versions include 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000. The CVSS 4.0 score of 9.2 indicates critical severity. Exploitation is simple and requires no prior access. It exemplifies insecure direct object reference. The impact includes denial of service and data loss. System compromise is possible if critical files are deleted. Proper sanitization and authentication would mitigate this risk.
Platform: DB Electronica Mozart
Version: Versions 30-7000
Vulnerability: Unauthenticated Arbitrary File Deletion
Severity: Critical
date: 2025-11-25
Prediction: Patch expected 2025-12-31
What Undercode Say:
curl -X GET “http://
wget –spider “http://
echo “Versions 30,50,100,300,500,1000,2000,3000,3500,6000,7000”
How Exploit:
Identify target web interface.
Craft HTTP request deletepatch parameter.
Use path traversal sequences.
Send unauthenticated request.
Confirm file deletion.
Protection from this CVE
Implement authentication mechanisms.
Sanitize input parameters.
Restrict file deletion scope.
Apply vendor patches.
Use WAF rules.
Impact:
Arbitrary file deletion.
Denial of service.
Data loss.
System compromise potential.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
