What is CVE-2025-29270?

CVE-2025-29270 is a critical-severity vulnerability in N/a, classified under Information Disclosure. CVSS score: 10.0/10. Published 2025-10-31.

How severe is CVE-2025-29270?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Information disclosure in N/a

CVE-2025-29270

Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete control of the device.

Vulnerability class: Information Disclosure

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure
CWE-284 — Improper Access Control

References

cve@mitre.org

Frequently asked questions

What is CVE-2025-29270?: CVE-2025-29270 is a critical-severity vulnerability in N/a, classified under Information Disclosure. CVSS score: 10.0/10. Published 2025-10-31.
How severe is CVE-2025-29270?: Critical severity. CVSS v3 base score is 10.0 out of 10.