Skip to content
OpenAdvisories
High ICSA-25-203-01 3 CVEs

DuraComm DP-10iN-100-MU

Published Jul 22, 2025 · Updated Jul 22, 2025

Vendor: DuraComm Product: SPM-500 DP-10iN-100-MU

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or cause a denial-of-service condition.

Vulnerabilities 3

  • High 8.1
    CVE-2025-41425

    DuraComm DP-10iN-100-MU Cross-site Scripting

    DuraComm SPM-500 DP-10iN-100-MU is vulnerable to a cross-site scripting attack. This could allow an attacker to prevent legitimate users from accessing the web interface.

    DuraComm SPM-500 DP-10iN-100-MU
  • High 7.5
    CVE-2025-48733

    DuraComm DP-10iN-100-MU Missing Authentication for Critical Function

    DuraComm SPM-500 DP-10iN-100-MU lacks access controls for a function that should require user authentication. This could allow an attacker to repeatedly reboot the device.

    DuraComm SPM-500 DP-10iN-100-MU
  • High 7.5
    CVE-2025-53703

    DuraComm DP-10iN-100-MU Cleartext Transmission of Sensitive Information

    DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted by attackers.

    DuraComm SPM-500 DP-10iN-100-MU

Revision history

  1. #1

    Initial Publication

References