Comet System H3531 Web-based Management setupA.cfg missing authentication
Priority HIGH 75CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.
Summary
A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. Affected by this issue is some unknown functionality of the file /setupA.cfg of the component Web-based Management Interface. Performing manipulation results in missing authentication. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used. There are still doubts about whether this vulnerability truly exists. The vendor explains, that "[d]evices described at CVE are not intended to be exposed into internet and proper security of devices is to end-users."
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01375 72nd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Comet System | T0510 | 1.60 | — | No fix listed | CNA |
| Comet System | T3510 | 1.60 | — | No fix listed | CNA |
| Comet System | T3511 | 1.60 | — | No fix listed | CNA |
| Comet System | T4511 | 1.60 | — | No fix listed | CNA |
| Comet System | T6640 | 1.60 | — | No fix listed | CNA |
| Comet System | T7511 | 1.60 | — | No fix listed | CNA |
| Comet System | T7611 | 1.60 | — | No fix listed | CNA |
| Comet System | P8510 | 1.60 | — | No fix listed | CNA |
| Comet System | P8552 | 1.60 | — | No fix listed | CNA |
| Comet System | H3531 | 1.60 | — | No fix listed | CNA |
- T0510 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- T3510 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- T3511 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- T4511 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- T6640 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- T7511 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- T7611 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- P8510 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- P8552 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
- H3531 VendorComet System Affected 1.60 Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cometsystem:t7611_firmware:1-5-7-5.1252:*:*:*:*:*:*:* | 1-5-7-5.1252 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t7611:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:t4511_firmware:1-5-7-5.1252:*:*:*:*:*:*:* | 1-5-7-5.1252 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t4511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:t0510_firmware:1-5-7-5.1252:*:*:*:*:*:*:* | 1-5-7-5.1252 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t0510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:t6640_firmware:1-5-7-5.1252:*:*:*:*:*:*:* | 1-5-7-5.1252 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t6640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:t3510_firmware:1-5-7-5.1252:*:*:*:*:*:*:* | 1-5-7-5.1252 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t3510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
- cpe:2.3:o:cometsystem:t7611_firmware:1-5-7-5.1252:*:*:*:*:*:*:* Versions 1-5-7-5.1252 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t7611:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:t4511_firmware:1-5-7-5.1252:*:*:*:*:*:*:* Versions 1-5-7-5.1252 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t4511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:t0510_firmware:1-5-7-5.1252:*:*:*:*:*:*:* Versions 1-5-7-5.1252 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t0510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:t6640_firmware:1-5-7-5.1252:*:*:*:*:*:*:* Versions 1-5-7-5.1252 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t6640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:t3510_firmware:1-5-7-5.1252:*:*:*:*:*:*:* Versions 1-5-7-5.1252 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t3510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cometsystem:t7511_firmware:1-5-7-5.1251:*:*:*:*:*:*:* | 1-5-7-5.1251 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t7511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:t3511_firmware:1-5-7-2.1151:*:*:*:*:*:*:* | 1-5-7-2.1151 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:t3511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:p8510_firmware:4-5-8-0.3488:*:*:*:*:*:*:* | 4-5-8-0.3488 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:p8510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:p8552_firmware:4-5-8-1.3502:*:*:*:*:*:*:* | 4-5-8-1.3502 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:p8552:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
| cpe:2.3:o:cometsystem:h3531_firmware:9-5-0-1.1327:*:*:*:*:*:*:* | 9-5-0-1.1327 | Vulnerable | Comet System |
| cpe:2.3:h:cometsystem:h3531:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Comet System |
- cpe:2.3:o:cometsystem:t7511_firmware:1-5-7-5.1251:*:*:*:*:*:*:* Versions 1-5-7-5.1251 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t7511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:t3511_firmware:1-5-7-2.1151:*:*:*:*:*:*:* Versions 1-5-7-2.1151 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:t3511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:p8510_firmware:4-5-8-0.3488:*:*:*:*:*:*:* Versions 4-5-8-0.3488 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:p8510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:p8552_firmware:4-5-8-1.3502:*:*:*:*:*:*:* Versions 4-5-8-1.3502 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:p8552:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
- cpe:2.3:o:cometsystem:h3531_firmware:9-5-0-1.1327:*:*:*:*:*:*:* Versions 9-5-0-1.1327 Vulnerable ·Comet System
- cpe:2.3:h:cometsystem:h3531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Comet System
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-6763
- 2026-10-03 Alias added: GHSA-3gwm-7v5q-jm39
References
Sources
- CVE-2025-6763 · CVE Program
- CVE-2025-6763 · NVD
- FIRST EPSS
- GHSA-3gwm-7v5q-jm39 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences