Newtec Celoxa504 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Newtec Celoxa504 Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:newtec:celoxa504_firmware

CVE-2025-63210 Critical · 9.8 CWE-287 Nov 19, 2025

Improper Authentication in Newtec Celoxa504 Firmware

The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName flow, the attacker can gain Superuser or Operator access without providing valid credentials.