CVE-2025-61197

Published: Oct 6, 2025Modified: Jun 17, 2026Deferred

8.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Exploitability: 2.3 / Impact: 6.0

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the application stores user privilege/role information in client-side browser storage

Related CWEs

CWE-602

Client-Side Enforcement of Server-Side Security

The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

References (2)

https://github.com/giulioschiavone/Vulnerability-Research/tree/main/CVE-2025-61197

Source: cve@mitre.org

https://www.orban.com/

Source: cve@mitre.org

Timeline

No history available yet.