Live › vulnerability › CVE-2025-68392
ARKETEAM Protectel modules PROTECTELMAJ and BDF let a low-privileged user run some admin-only functions by sending forged direct requests to a specific endpoint. The sources do not describe what those functions do beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 12:30 UTC. All times on this page are UTC.
Teams running ARKETEAM Protectel PROTECTELMAJ or BDF modules before the fixed versions. The sources do not say which deployments expose the endpoint, so whether a given install is reachable is unknown.
No product ranges from the sources yet.
6.5.19 and the BDF version against 6.4.676.5.19 or later6.4.67 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67
This page as .md · .json · in your agent: get_signal("CVE-2025-68392")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.