The ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2000, STAR1000, STAR500, and
Source GCVE Database
Not known to be exploited · CVSS 7.5 High.
Data as of 13 Nov 2026, 20:47 UTC
Thin evidence
One scorer or none| CISA-ADP | CVSS 3.1 | 7.5 |
|---|
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 19 Nov 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.
What to do
AI-suggested
Since the vulnerability involves an unprotected endpoint exposing plaintext credentials, mitigation should focus on restricting access to the /setup.xml endpoint through network controls or firewall rules to prevent unauthenticated access. Monitor vendor advisories for any forthcoming patches or official remediation guidance.
Description
ELCA Star Transmitter Remote Control firmware version 1.25 for multiple models contains an information disclosure vulnerability. An unauthenticated attacker can access the /setup.xml endpoint, which is unprotected, to retrieve admin credentials stored in plaintext. This exposure allows potential remote compromise of the transmitter system. The vulnerability has a high severity rating with a CVSS score of 7.5.