PatchTheCVEmozart next 3000 firmware vulnerabilities and fixes
Recent CVEs affecting mozart next 3000 firmware, with upgrade or downgrade steps. 17 tracked.
Also searched as: mozartnext3000firmware.
mozart next 3000 firmware has 17 tracked vulnerabilities, 11 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-11-26. Highest priority: CVE-2025-66253 (score 68/100).
- CVE-2025-66263 HIGH 7.5 MITIGATE MITIGATE Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66253 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66261 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66262 CRITICAL 9.8 MITIGATE MITIGATE Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66259 CRITICAL 9.8 MITIGATE MITIGATE Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni
- CVE-2025-66250 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66256 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66251 CRITICAL 9.1 MITIGATE MITIGATE Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66255 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66254 CRITICAL 9.1 MITIGATE MITIGATE Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66257 CRITICAL 9.1 MITIGATE MITIGATE Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66252 HIGH 7.5 MITIGATE MITIGATE Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66260 MEDIUM 6.5 MITIGATE MITIGATE PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-66258 MEDIUM 5.4 MITIGATE MITIGATE Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A
- CVE-2025-63229 MEDIUM 5.4 MITIGATE MITIGATE The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site
- CVE-2025-63228 CRITICAL 9.8 MITIGATE MITIGATE The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file
- CVE-2025-63227 HIGH 7.2 MITIGATE MITIGATE The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file up
FAQ
How do I fix mozart next 3000 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mozart next 3000 firmware being exploited right now?
None of the tracked mozart next 3000 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mozart next 3000 firmware CVE should I patch first?
CVE-2025-66253 currently ranks highest (68/100): Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A.
RSS feed for mozart next 3000 firmware · ← Back to latest CVEs