CVE-2025-63209 Details

An information disclosure vulnerability has been identified in the ELCA Star Transmitter Remote Control firmware version 1.25, affecting models STAR150, BP1000, STAR300, STAR2000, STAR1000, STAR500, and possibly others. This vulnerability allows unauthenticated attackers to access admin credentials and system settings through an unprotected '/setup.xml' endpoint. The admin password is stored in plaintext under the '<p05>' XML tag, which could lead to a remote compromise of the transmitter system.

To address this vulnerability, restrict access to the '/setup.xml' file, ensuring it is not available without authentication. Additionally, remove plaintext password storage by encrypting credentials before they are saved. Implement proper authorization controls to require admin authentication for accessing sensitive configuration files. Finally, enable logging and monitoring to track access to these files and alert for any unauthorized attempts.