cve.bz

CVE-2025-63224

10.0 criticalEPSS 0.7%

Critical (10.0) in itel idenc firmware. EPSS 0.7% chance of exploitation in the next 30 days.

The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

Severity

CVSS 3.1

10.0 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWEs
CWE-287, CWE-384
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON