Authentication Bypass in Deep Sea Electronics DSE855 Device

CVE-2025-29270

What is CVE-2025-29270?

An incorrect access control vulnerability exists in the realtime.cgi endpoint of Deep Sea Electronics's DSE855 devices, versions 1.1.0 to 1.1.26. This flaw allows attackers to bypass authentication, potentially gaining unauthorized access to the administrative panel. Successful exploitation could enable malicious actors to manipulate device settings and pose significant risks to network security and operations. It is crucial for users to assess their devices and apply necessary patches to mitigate risks associated with this vulnerability.

References