CVE-2025-28235

Summary

CVE-2025-28235 is a newly identified information disclosure vulnerability affecting the Soundcraft Ui Series Model Ui12 and Ui16 Firmware versions 1.0.7x and 1.0.5x. This issue lies in the component /socket.io/1/websocket/ and allows attackers to gain unauthorized access to Administrator credentials in their plaintext format. Successful exploitation of this vulnerability can result in serious security consequences, including unauthorized access to the targeted system or network. It is crucial for users to update their firmware as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.