Itel vulnerabilities
Published CVEs affecting Itel products: 4 record(s), with severity, exploitation and fixes.
CVE-2025-63224
Critical · 10.0
CWE-287 Nov 19, 2025
Improper Authentication in Itel Idenc Firmware
The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
CVE-2025-63219
High · 7.5
CWE-284 Nov 19, 2025
Improper Access Control in Itel Iso-fm Firmware
The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and compromise system integrity.
CVE-2025-63217
Critical · 9.8
CWE-288 Nov 18, 2025
Authentication Bypass Using an Alternate Path or Channel in Itel Id Mux Firmware
The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
CVE-2025-63216
Critical · 10.0
CWE-287 Nov 18, 2025
Improper Authentication in Itel Idgateway Firmware
The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.