Signum DVB-S/S2 IRD - Authentication Bypass (CVE-2025-0674)
Description
Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized administrative access to protected areas of the application, compromising the device's system security.
psychologyCrowdSec Analysis
CVE-2025-0674 is a critical authentication bypass vulnerability impacting multiple Elber products, including the Signum DVB-S/S2 IRD and others. This flaw allows attackers to manipulate endpoints and overwrite any user's password, granting unauthorized administrative access to protected areas of the affected devices. Exploitation of this vulnerability could lead to full system compromise, enabling attackers to control device functionality and potentially disrupt broadcast or communication services.
CrowdSec has been tracking this vulnerability and its exploits since 15th of April 2026.
CrowdSec has not observed any significant exploitation activity targeting CVE-2025-0674 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit authentication bypass by sending requests to /modules/pwd.html and /json_data/set_pwd endpoints, allowing unauthorized access to password management and enabling them to reset user credentials without authentication.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2025-02-06 |
| Rule Released | 2026-04-15 |