CVE-2025-63219

7.5 highEPSS 0.5%

High (7.5) in itel iso-fm firmware. EPSS 0.5% chance of exploitation in the next 30 days.

The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and compromise system integrity.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-11-01)
CWE: CWE-284
Published: 2025-11-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

itel:iso-fm_firmware

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63219_ITEL%20ISO%20FM%20SFN%20Adapter%20-%20Session%20Hijacking
https://www.itel.it/

Check your stack JSON