CVE-2025-56241

Publication date

2025-09-24 00:00:00

Family

mitre

State

PUBLISHED

Description

Aztech DSL5005EN firmware 1.00.AZ_2013-05-10 and possibly other versions allows unauthenticated attackers to change the administrator password via a crafted POST request to sysAccess.asp. This allows full administrative control of the router without authentication.