CVE-2025-28232 - Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication

Back Back to CVE browser

CRITICAL

Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication

Published Apr 18, 2025

9.1

CRITICAL

CVSS 3.1

EPSS 0.60%

Description

Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (1)

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28232
exploitThird Party Advisory

Link	Providers	Tags
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28232		exploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 18, 2025

Updated Apr 22, 2025

Reserved Mar 11, 2025

Link CVE-2025-28232

CISA Vulnrichment

Updated Apr 22, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-28232

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-28232