CVE-2025-66252

Infinite Loop Denial of Service via Failed File Deletion

State
Published
Severity
8.4 High
Published
Nov 26, 2025
Updated
Dec 1, 2025
Reserved
Nov 26, 2025

Read the record on cve.org

Description

Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the fact that the unlink operation is done in a while loop; if an immutable file is specified or otherwise a file in which the process has no permissions to delete; it would repeatedly attempt to do in a loop.

Scores

CVSSScoreVectorSource
4.08.4 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:HGridware

Weaknesses

  • CWE-835 Infinite Loop Denial of Service via Failed File Deletion

Affected Products

ProductVersions
Mozart FM TransmitterDB Electronica Telecomunicazioni S.p.A.
  • 30Affected
  • 50Affected
  • 100Affected
  • 300Affected
  • 500Affected
  • 1000Affected
  • 2000Affected
  • 3000Affected
  • 3500Affected
  • 6000Affected
  • 7000Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.