CVE-2025-0576
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 20, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2025-0576 is a recently disclosed vulnerability that affects Mobotix M15 devices running software version 4.3.4.83. The issue lies in the processing of the /control/player URL with an argument named p_qual, which can be manipulated to trigger cross-site scripting (XSS). This vulnerability can be exploited remotely and the exploit code is now publicly available. Despite early notification, the vendor has not yet responded to the disclosure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Mobotix