CVE-2025-64385criticalCWE-20

CVE-2025-64385: fallo crítico en Circutor TCPRS1plus

INCORRECT SECURITY VALIDATION IN SENDING UDP FRAMES

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear TCPRS1plus

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.2epss 0.4%
The equipment initially can be configured using the manufacturer's application, by Wi-Fi, by the web server or with the manufacturer’s software. Using the manufacturer's software, the device can be configured via UDP. Analyzing this communication, it has been observed that any aspect of the initial configuration can be changed by means of the device's MAC without the need for authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H
Productos afectados
Circutor · TCPRS1plus
CVEs relacionadas — Circutor TCPRS1plus

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-64387MEDIUMCLICKJACKINGEPSS 0.4%CVE-2025-64388CRITICALDenial of service through specific packetsEPSS 0.4%CVE-2025-64386HIGHHIJACKING OF THE TOKEN AND GAINING ACCESSEPSS 0.4%CVE-2025-64389HIGHEXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXTEPSS 0.2%