CVE-2025-5095 | THREATINT

Description

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request's legitimacy.

Reserved 2025-05-22 | Published 2025-08-08 | Updated 2025-08-08 | Assigner icscert

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-306

Product status

Default status

unaffected

Any version before 1.0.62

affected

Credits

Souvik Kandar of MicroSec (microsec.io) reported this vulnerability to CISA. finder

References

www.cisa.gov/news-events/ics-advisories/icsa-25-219-03

www.burk.com/products/Broadcast/ARC-Solo-6

cve.org (CVE-2025-5095)

nvd.nist.gov (CVE-2025-5095)

Download JSON