Critical severity10.0NVD Advisory· Published Oct 31, 2025· Updated Apr 15, 2026

CVE-2025-29270

Description

Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete control of the device.

Affected products

Deep Sea Electronics/DSE855llm-create
Range: v1.1.0 to v1.1.26

Patches

Vulnerability mechanics

References

blog.byteray.co.uk/shadow-entry-discovery-of-authentication-bypass-vulnerability-in-dse855-communications-device-938e35d4b361nvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000