ByteOS Network

NVD Vulnerability Details :

CVE-2025-5833

Analyzed

Source-zdi-disclosures@trendmicro.com

Published At-25 Jun, 2025 | 18:15

Updated At-08 Jul, 2025 | 14:52

Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the operating system. The issue results from the lack of properly configured protection for the root file system. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26077.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.8	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.0	4.6	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Type: Primary

Version: 3.1

Base score: 6.8

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.0

Base score: 4.6

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CPE Matches

pioneer>>dmh-wt7600nex_firmware>>3.05

cpe:2.3:o:pioneer:dmh-wt7600nex_firmware:3.05:*:*:*:*:*:*:*

pioneer>>dmh-wt7600nex>>-

cpe:2.3:h:pioneer:dmh-wt7600nex:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-345	Primary	zdi-disclosures@trendmicro.com

CWE ID: CWE-345

Type: Primary

Source: zdi-disclosures@trendmicro.com

References

Hyperlink	Source	Resource
https://www.zerodayinitiative.com/advisories/ZDI-25-350/	zdi-disclosures@trendmicro.com	Third Party Advisory

Hyperlink: https://www.zerodayinitiative.com/advisories/ZDI-25-350/

Source: zdi-disclosures@trendmicro.com

Resource:

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History