Threats Tagged 'cve-2025-65855'
View all threats tagged with 'cve-2025-65855'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-65855'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-65855 is a vulnerability in the OTA firmware update mechanism of Netun Solutions HelpFlash IoT emergency signaling devices. The devices use hard-coded WiFi credentials shared across all units and lack authentication for update servers or firmware signature validation. An attacker with brief physical access can trigger OTA mode by pressing a button for 8 seconds, then create a malicious WiFi access point using the known credentials. This allows the attacker to deliver malicious firmware via unauthenticated HTTP, leading to arbitrary code execution on a safety-critical device. The CVSS score is 6.6 (medium severity), reflecting the need for physical access and user interaction but high impact on confidentiality, integrity, and availability. No known exploits are currently reported in the wild. European organizations relying on these devices for emergency signaling could face significant operational and safety risks if exploited. Mitigation requires firmware updates with proper authentication and signature validation, restricting physical access, and monitoring device behavior for anomalies. Join the discussion | CVE Database V5 | 12/17/2025, 00:00:00 UTC Added: 12/17/2025, 16:22:33 UTC |
Showing 1 to 1 of 1 result