CVE-2025-6763 Comet System H3531 Web-based Management setupA.cfg missing authentication
Remote attackers can bypass authentication on the web management interface of Comet System devices to access configuration files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6763?
CVE-2025-6763 is a critical missing authorization vulnerability in Comet System H3531, published on 27 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. Affected by this issue is some unknown functionality of the file /setupA.cfg of the component Web-based Management Interface. Performing manipulation results in missing authentication. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used. There are still doubts about whether this vulnerability truly exists. The vendor explains, that "[d]evices described at CVE are not intended to be exposed into internet and proper security of devices is to end-users."
Which versions are affected by CVE-2025-6763?
It affects 10 products.
Products include Cometsystem H3531 Firmware, Cometsystem P8510 Firmware, Cometsystem P8552 Firmware, Cometsystem T0510 Firmware, Cometsystem T3510 Firmware, Cometsystem T3511 Firmware and 4 more.
How do I fix CVE-2025-6763?
No fix has been published for CVE-2025-6763 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-6763 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-6763 exists.
Sources
Also known as GHSA-3gwm-7v5q-jm39.