External risk intelligence

DB Electric Mozart Transmitter Arbitrary File Upload Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.2)

CVE-2025-66250

This vulnerability affects FM transmitter firmware, which is typically deployed in physical broadcast infrastructure. While the device interface is network-accessible and susceptible to unauthenticated file uploads, these management portals are usually positioned behind network access controls or within isolated broadcast segments rather than directly on the public internet.

Unrestricted File Upload

Dbbroadcast Mozart Next 100 Firmware

Halo Surface Signal: 3 out of 5 — possibly public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical vulnerability has been identified in certain DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter devices, allowing unauthenticated attackers to upload arbitrary files. This could potentially lead to system compromise by enabling the introduction of malicious files into the system. The main concern is confirming relevance and exposure to these devices.

Attackers can upload unauthorized files to devices.
These devices are used in broadcasting infrastructure.
Assess potential exposure and confirm device relevance.

Attack Path

How an attacker could exploit the issue

An attacker could exploit this vulnerability by accessing the device over the network without needing any credentials. They would then upload a malicious file through a specific script, potentially leading to unauthorized access or control of the transmitter system.

Network access required, no authentication needed.
Upload file via status_contents.php.
Potential for arbitrary file upload.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability allows an unauthenticated attacker to upload arbitrary files to the affected FM transmitter devices. This could potentially lead to the compromise of the device's integrity or availability, depending on the type of file uploaded and the device's configuration.

Device integrity and availability.
File upload via a network interface.
Disruption of broadcast services.

Operational Fix

Recommended remediation, mitigation, and detection steps

The real-world ownership for this vulnerability likely falls to infrastructure or platform teams managing the broadcast equipment, with potential vendor coordination for updates or patches. The immediate first step is to identify all deployed instances of the affected DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitters, determine their network exposure and business criticality, and then assign an owner for remediation planning based on the identified risk.

Infrastructure or platform teams own the issue.
Verify network exposure and asset criticality first.
Plan remediation based on risk and vendor coordination.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the DB Electronica Mozart FM Transmitter?

These devices are specialized hardware components used within professional broadcasting infrastructure to transmit FM radio signals. They facilitate the delivery of audio content over the airwaves, often managed through internal network interfaces that allow operators to monitor and configure the transmitter's performance and status.

What is the security weakness in CVE-2025-66250?

This vulnerability is classified as Unrestricted Upload of File with Dangerous Type (CWE-434). In plain English, the system lacks necessary checks, allowing an unauthorized user to upload arbitrary files to the device. Because the system does not verify the identity of the user or the content of the file, an attacker can place files onto the device that could compromise its integrity or disrupt broadcast operations.

How does an attacker trigger this file upload?

An attacker initiates this by sending a network request directly to the 'status_contents.php' script on the affected transmitter. Crucially, the vulnerability does not require any credentials, meaning the device does not stop an attacker from interacting with this script. The attack is purely network-based and does not require the attacker to have physical access to the transmitter hardware.

Is my device at risk if it is not on the public internet?

Halo Surface Signal notes that while these transmitters are network-accessible, they are often deployed in isolated broadcast segments rather than directly on the public internet. If your management portal is protected by network access controls that limit who can reach the device, your actual exposure is significantly lower than if the device were reachable from any external network.

What should I do if I run these transmitters?

Your first step is to create a complete inventory of all Mozart FM Transmitters in your environment. Once you have identified them, verify their network configuration to understand if they are exposed to unauthorized users. Finally, coordinate with your infrastructure team to review vendor-provided guidance or updates, focusing on restricting network access to these management interfaces.

References

www.abdulmhsblog.com/posts/webfmvulns/

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.