PoC Index

CVE-2025-56241

HIGH 7.5EPSS 6.7%

Aztech DSL5005EN firmware 1.00.AZ_2013-05-10 and possibly other versions allows unauthenticated attackers to change the administrator password via a crafted POST request to sysAccess.asp. This allows full administrative control of the router without authentication.

CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
6.68% chance of exploitation in the next 30 days, 93th percentile
Published
2025-09-24
Updated
2025-11-17

Proof-of-concept exploits (2)

References

Related