CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-63218

The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.2%

CVSS Severity

CVSS v3 Score 9.8

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63218_Axel%20Technology%20WOLF1MS%20and%20WOLF2MS%20-%20Broken%20Access%20Control
https://www.axeltechnology.com/

Products affected by CVE-2025-63218

Axeltechnology » Wolf1ms » Version: N/A

cpe:2.3:h:axeltechnology:wolf1ms:-
Axeltechnology » Wolf2ms » Version: N/A

cpe:2.3:h:axeltechnology:wolf2ms:-
Axeltechnology » Wolf1ms Firmware » Version: Any

cpe:2.3:o:axeltechnology:wolf1ms_firmware:*
Axeltechnology » Wolf2ms Firmware » Version: Any

cpe:2.3:o:axeltechnology:wolf2ms_firmware:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-63218

Products

Pricing

Contact Us