Unrated severityNVD Advisory· Published Nov 18, 2025· Updated Nov 19, 2025

CVE-2025-63225

Description

The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any form of authentication. This vulnerability allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eurolab/ELTS100_UBXcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: == firmware version ELTS100v1.UBX

Patches

Vulnerability mechanics

References

eurolab-srl.commitre
github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63225_Eurolab_ELTS100_UBX_Broken_Access_Controlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000