CVE-2025-48733

DuraComm SPM-500 DP-10iN-100-MU lacks access controls for a function that should require user authentication. This could allow an attacker to repeatedly reboot the device.

Score

CVSS 4.0 8.7 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-07-22

Last modified

2025-07-23

Weaknesses

CWE-306

Affected products

• Spm-500 Dp-10in-100-mu (Duracomm Corporation)

References

• https://duracomm.com/contact-us/
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-01