CVE-2025-67015

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-26 · updated 2026-10-13
Weakness: CWE-284

Description

Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/admin_access_1.

Affected products

Comtech Cdm-625 Firmware: 2.5.1
Comtech Cdm-625A Firmware: 2.5.1

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67015%20_%20Comtech%20EF%20Data%20CDM-625%20_%20CDM-625A%20Advanced%20_%20Broken%20Access%20Control
https://www.comtechefdata.com/

Get alerted when CVE-2025-67015 or the next vulnerability affects your stack