First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-0675

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Elber	Signum DVB-S/S2 IRD	<= 1.999
Elber	Cleber/3 Broadcast Multi-Purpose Platform	1.0
Elber	Reble610 M/ODU XPIC IP-ASI-SDH	0.01
Elber	ESE DVB-S/S2 Satellite Receiver	<= 1.5.179
Elber	Wayber Analog/Digital Audio STL	4

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03

Timeline

Published: Feb 7, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-06768.6This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exp CVE-2025-06776.4A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buf CVE-2025-06787.8A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the fi CVE-2025-06794.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. CVE-2025-06809.8Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control CVE-2025-06816.2The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive inf CVE-2025-06828.8The ThemeREX Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.0 via the 'trx_sc_CVE-2025-06835.9In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address whe CVE-2025-06846.4A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled param CVE-2025-06856.4A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the fi CVE-2025-06866.4A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled par CVE-2025-06876.1The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before o