CVE Intelligence

Magewell vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Magewell products: 2 record(s), with severity, exploitation and fixes.

Pro Convert For Ndi To Aio Firmware 1Ultra Encode Aio Firmware 1Ultra Encode Sdi Plus Firmware 1Ultra Encode Hdmi Plus Firmware 1Ultra Encode Sdi Firmware 1Ultra Encode Hdmi Firmware 1Pro Convert Audio Dx Firmware 1Pro Convert Aes67 Firmware 1Pro Convert For Ndi To Sdi Firmware 1Pro Convert Hdmi 4k Plus Firmware 1Pro Convert For Ndi To Hdmi 4k Firmware 1Pro Convert For Ndi To Hdmi Firmware 1Pro Convert Sdi Tx Firmware 1Pro Convert Sdi Plus Firmware 1Pro Convert Sdi 4k Plus Firmware 1Pro Convert 12g Sdi 4k Plus Firmware 1Pro Convert Hdmi Tx Firmware 1Pro Convert Hdmi Plus Firmware 1

Exploited only (KEV) →

CVE-2025-63953 Medium · 6.5 CWE-352 Nov 24, 2025
Cross-Site Request Forgery (CSRF) in Magewell Ultra Encode Hdmi Firmware
A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
CVE-2025-63952 Medium · 5.7 CWE-352 Nov 24, 2025
Cross-Site Request Forgery (CSRF) in Magewell Pro Convert Hdmi 4k Plus Firmware
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.