Elber Communications Equipment Hidden Functionality

8.7 CVSS

Vulnerability Description

Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0675

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Gjoko Krstic of Zero Science Lab reported these vulnerabilities to CISA.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03

More from Elber

View All →

CVE-2025-0674

Elber Communications Equipment Authentication Bypass Using an Alternate Path or Channel

Critical 9.3

Affected Vendor

Elber

View all reports →

Affected Software

Signum DVB-S/S2 IRD, Cleber/3 Broadcast Multi-Purpose Platform, Reble610 M/ODU XPIC IP-ASI-SDH, ESE DVB-S/S2 Satellite Receiver, Wayber Analog/Digital Audio STL

Vulnerable Versions:

0, 1.0, 0.01, 4

Timeline

Official Publish: February 6th, 2025

Last Modified: February 12th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-912

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.