Vulnerability Description
Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the fact that the unlink operation is done in a while loop; if an immutable file is specified or otherwise a file in which the process has no permissions to delete; it would repeatedly attempt to do in a loop.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dbbroadcast | Mozart Next 100 Firmware | - |
| Dbbroadcast | Mozart Next 100 | - |
| Dbbroadcast | Mozart Next 1000 Firmware | - |
| Dbbroadcast | Mozart Next 1000 | - |
| Dbbroadcast | Mozart Next 2000 Firmware | - |
| Dbbroadcast | Mozart Next 2000 | - |
| Dbbroadcast | Mozart Next 30 Firmware | - |
| Dbbroadcast | Mozart Next 30 | - |
| Dbbroadcast | Mozart Next 300 Firmware | - |
| Dbbroadcast | Mozart Next 300 | - |
| Dbbroadcast | Mozart Next 3000 Firmware | - |
| Dbbroadcast | Mozart Next 3000 | - |
| Dbbroadcast | Mozart Next 3500 Firmware | - |
| Dbbroadcast | Mozart Next 3500 | - |
| Dbbroadcast | Mozart Next 50 Firmware | - |
| Dbbroadcast | Mozart Next 50 | - |
| Dbbroadcast | Mozart Next 500 Firmware | - |
| Dbbroadcast | Mozart Next 500 | - |
| Dbbroadcast | Mozart Next 6000 Firmware | - |
| Dbbroadcast | Mozart Next 6000 | - |
Related Weaknesses (CWE)
References
- https://www.abdulmhsblog.com/posts/webfmvulns/ExploitThird Party Advisory
- https://www.abdulmhsblog.com/posts/webfmvulns/ExploitThird Party Advisory
FAQ
What is CVE-2025-66252?
CVE-2025-66252 is a vulnerability with a CVSS score of 7.5 (HIGH). Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an a...
How severe is CVE-2025-66252?
CVE-2025-66252 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-66252?
Check the references section above for vendor advisories and patch information. Affected products include: Dbbroadcast Mozart Next 100 Firmware, Dbbroadcast Mozart Next 100, Dbbroadcast Mozart Next 1000 Firmware, Dbbroadcast Mozart Next 1000, Dbbroadcast Mozart Next 2000 Firmware.