CVE-2025-48733 — DuraComm DP-10iN-100-MU Missing Authentication for Critical Function

CVE-2025-48733

DuraComm DP-10iN-100-MU Missing Authentication for Critical Function PUBLISHED

Description (CNA)

DuraComm SPM-500 DP-10iN-100-MU lacks access controls for a function that should require user authentication. This could allow an attacker to repeatedly reboot the device.

Affected (CNA)

Vendor / product	Versions
DuraComm Corporation / SPM-500 DP-10iN-100-MU	affected 0 through Version 4.10

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-01
https://duracomm.com/contact-us/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.