CVE-2025-28228

A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

1.75% chance of exploitation in the next 30 days, 76th percentile

Nuclei

high · CWE-522

Published

2025-04-18

Updated

2025-04-22

Proof-of-concept exploits (1)

• shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28228

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28228.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-28229
• CVE-2025-28230
• CVE-2025-28232
• CVE-2025-45813
• CVE-2025-45814
• CVE-2025-57430