Skip to main content
CVE-2025-67014VulnerabilityPublished

CVE-2025-67014: n/a

Source CVE Database V5

0

Not known to be exploited · CVSS 7.5 High.

Data as of 26 Oct 2026, 07:57 UTC

CVSS 3.1 base score
7.5High
How severe the flaw is on the 0–10 CVSS scale.
EPSS
0.5% chance of exploitation in 30 days – higher than 46% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 26 Dec 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.

What to do

AI-suggested

European organizations should immediately audit their network environments to identify any DEV 7113 RF over Fiber Distribution System 32-0078 H.01 devices. Network segmentation should be enforced to isolate these devices from untrusted or public networks, limiting exposure of administrative interfaces. Access to the device's management interfaces must be restricted using firewall rules and VPNs requiring strong authentication. Organizations should engage with DEV Systemtechnik GmbH to obtain information on patches or firmware updates addressing this vulnerability and apply them promptly once available. In the absence of patches, consider deploying compensating controls such as disabling remote administrative access or using network-level authentication proxies. Continuous monitoring and logging of access attempts to these devices should be implemented to detect and respond to unauthorized access quickly. Incident response plans should be updated to include scenarios involving this vulnerability. Additionally, organizations should educate network administrators about the risks and signs of exploitation related to this vulnerability. Finally, consider alternative hardware or vendors if timely remediation is not feasible.

Description

Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an administrative endpoint.

References

Community reviews

Loading reviews…