Newtec vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Newtec products: 1 record(s), with severity, exploitation and fixes.

Celoxa504 Firmware 1 Celoxa820 Firmware 1

Exploited only (KEV) →

CVE-2025-63210 Critical · 9.8 CWE-287 Nov 19, 2025

Improper Authentication in Newtec Celoxa504 Firmware

The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName flow, the attacker can gain Superuser or Operator access without providing valid credentials.