What is CVE-2025-61235?

CVE-2025-61235 is a critical-severity vulnerability in N/a, classified under Improper Input Validation. CVSS score: 9.1/10. Published 2025-10-28.

How severe is CVE-2025-61235?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Improper input validation in N/a

CVE-2025-61235

An issue was discovered in Dataphone A920 v2025.07.161103. A custom packet based on public documentation can be crafted, where some fields can contain arbitrary or trivial data. Normally, such data should cause the device to reject the packet. However, due to a lack of validation, the device accepts it with no authetication and triggers the functionality instead.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org

Frequently asked questions

What is CVE-2025-61235?: CVE-2025-61235 is a critical-severity vulnerability in N/a, classified under Improper Input Validation. CVSS score: 9.1/10. Published 2025-10-28.
How severe is CVE-2025-61235?: Critical severity. CVSS v3 base score is 9.1 out of 10.