Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.9
CVE-2025-61197: Orban Optimod devices allow attackers to gain administrator access
CVE-2025-61197 · published 1 year ago
Summary
A security weakness in Orban Optimod devices, including the 5950, 5950HD, 5750, and 5750HD, allows a remote attacker to gain administrator access to the device. This could allow the attacker to change settings, access sensitive data, or disrupt the device's operation. Update to the latest version of the software to fix this issue.
Original advisory text
An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the a...
An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the application stores user privilege/role information in client-side browser storage
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-602Client-Side Enforcement of Server-Side Security
Timeline
Published6 Oct 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-61197 · NVD
Track software like this
Free during beta