CVE-2025-63210: Celoxa504 Firmware: hatalı kimlik doğrulama

Açıklama (NVD)

The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName flow, the attacker can gain Superuser or Operator access without providing valid credentials.

Özet bilgiler

Ürün

Newtec Celoxa504 Firmware

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,58 (yüzdelik 48)

CWE

CWE-287

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• www.newtec.com
• CWE-287