CRITICAL🇵🇱 Wersja polska

CVE-2025-27851

CVSS 9.3pub. 2026-05-13upd. 2026-06-02

The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate an exploit of this vulnerability, the victim must (1) be utilizing a web browser on a multihomed host that has local interfaces on the Garmin Marine Network as well as another network, and (2) access a malicious third party website created by the attacker.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

  • Garmin Empirbus Wireless Display Unit

    HW
    Garmin
    v1v2

  • Garmin Empirbus Wireless Display Unit Firmware

    OS
    Garmin
    1.4.65.00
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-27850HIGH7.5ten sam produkt

The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious gr...

CVE-2025-27853HIGH7.3ten sam produkt

The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. ...

CVE-2025-27852MEDIUM5.0ten sam produkt

The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (X...

CVE-2023-23298CRITICAL9.8ten sam vendor

The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not val...

CVE-2023-23300CRITICAL9.8ten sam vendor

The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validat...