Vulnerabilidades de Itel
CVEs publicadas que afetam produtos de Itel: 4 registro(s), com severidade, exploração e correções.
CVE-2025-63224
Crítica · 10.0
CWE-287 19/11/2025
Improper Authentication em Itel Idenc Firmware
The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
CVE-2025-63219
Alta · 7.5
CWE-284 19/11/2025
Improper Access Control em Itel Iso-fm Firmware
The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and compromise system integrity.
CVE-2025-63217
Crítica · 9.8
CWE-288 18/11/2025
Authentication Bypass Using an Alternate Path or Channel em Itel Id Mux Firmware
The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
CVE-2025-63216
Crítica · 10.0
CWE-287 18/11/2025
Improper Authentication em Itel Idgateway Firmware
The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.