Description
Elber信号监控系统多个产品版本存在权限绕过漏洞。该漏洞允许对密码管理功能进行未经授权的访问。攻击者可以通过纵端点来覆盖系统内任何用户的密码来利用此问题
Elber set_pwd 权限绕过 CVE-2025-0674
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2025-9270.html
https://www.zeroscience.mk/advisories/ZSL-2024-5820.html
https://nvd.nist.gov/vuln/detail/CVE-2025-0674
https://www.cve.org/CVERecord?id=CVE-2025-0674
https://ddpoc.com/DVB-2025-8725.html
https://consulenza.isgroup.it/kb/cve-2025-0674-bypass-autenticazione-elber/
https://www.sentinelone.com/vulnerability-database/cve-2025-0674/
https://pentest-tools.com/vulnerabilities-exploits/elber-ese-dvb-s-s2-authentication-bypass_27186
https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03
https://securityonline.info/cve-2025-0674-cvss-9-8-cve-2025-0675-cisa-warns-of-critical-elber-flaws-poc-available-no-patch/