Multiple Vulnerabilities in the Deep Sea Electronics DSE855
ID: cab691ba-87c1-59eb-b3c4-154dd9e8cc9a
STIX ID: report--cab691ba-87c1-59eb-b3c4-154dd9e8cc9a
Feed Name: Zero Day Initiative (ZDI) Blog
Threat Score
**Executive summary:** Reverse engineering of device firmware and web server components (A855/B855/C855/M855) uncovered ZDI-24-671: an unauthenticated URL that returns a full configuration backup. The analysis used Ghidra and dynamic testing to confirm the missing access control, which could expose sensitive configuration data and credentials if devices are reachable.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.