cbcvebase.

Aquatronica Controller System vulnerabilities

1 known vulnerability affecting aquatronica/aquatronica_controller_system.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-25037P1CRITICALCVSS 9.3ExploitedPoC≤ 5.1.62025-06-20
CVE-2025-25037 [CRITICAL] CWE-200 CVE-2025-25037: An information disclosure vulnerability exists in Aquatronica Controller System firmware versions <= An information disclosure vulnerability exists in Aquatronica Controller System firmware versions <= 5.1.6 and web interface versions <= 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration data, including plaintext administrative credentia
nvd
Aquatronica Controller System vulnerabilities | cvebase