Listen to this Post
The vulnerability resides in the status_contents.php script of the Mozart FM Transmitter software. It involves a while loop that attempts to delete a file using the PHP unlink() function. When the unlink() operation fails—due to the target file being immutable, having incorrect permissions, or otherwise being undeletable—the loop lacks any condition to break or exit. This results in an infinite loop as the script continuously retries the failed deletion. An attacker can exploit this by sending a crafted HTTP request to the status_contents.php endpoint, specifying a file path that cannot be deleted. The infinite loop consumes server CPU resources indefinitely, leading to a denial of service condition. The affected process may hang, causing the transmitter system to become unresponsive. Manual intervention, such as restarting the service, is required to recover, but the vulnerability persists without a patch. The issue is present in multiple firmware versions of the transmitter. The core problem is improper error handling within the loop structure, where failure states are not caught or managed. This allows a single malicious request to trigger sustained resource exhaustion. The vulnerability is remotely exploitable without authentication, making it accessible to network-based attackers. The loop does not implement a timeout or maximum retry limit. Consequently, the system’s availability is compromised until the process is terminated. Patching requires modifying the code to include proper checks on the unlink() return value and implementing loop exit conditions upon failure.
Platform: Mozart FM Transmitter
Version: Multiple affected versions
Vulnerability: Infinite Loop DoS
Severity: Critical
Date: 2025-11-25
Prediction: Patch expected 2025-12-31
What Undercode Say:
Analytics:
curl -s “http://target/status_contents.php?file=/etc/passwd”
ps aux | grep status_contents
cat /var/log/httpd/access_log | grep status_contents
systemctl status transmitter-service
How Exploit:
Request undeletable file parameter
Trigger infinite loop
No authentication needed
Protection from this CVE:
Apply vendor patch
Restrict file access
Implement error handling
Impact:
Service denial
System unresponsiveness
Resource exhaustion
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
