{"id":73890,"date":"2025-11-18T22:45:50","date_gmt":"2025-11-18T19:15:50","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-63225-eurolab-elts100_ubx-unauthenticated-administrative-access\/"},"modified":"2025-11-18T22:45:50","modified_gmt":"2025-11-18T19:15:50","slug":"cve-2025-63225-eurolab-elts100_ubx-unauthenticated-administrative-access","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-63225-eurolab-elts100_ubx-unauthenticated-administrative-access\/","title":{"rendered":"CVE-2025-63225 &#8211; Eurolab ELTS100_UBX Unauthenticated Administrative Access"},"content":{"rendered":"<p>CVE ID : CVE-2025-63225<\/p>\n<p>Published :  Nov. 18, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago<\/p>\n<p>Description : The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any form of authentication. This vulnerability allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation.<\/p>\n<p>Severity: 0.0 | NA<\/p>\n<p>Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-63225 Published : Nov. 18, 2025, 7:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago Description : The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-73890","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/73890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=73890"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/73890\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=73890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=73890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=73890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}