CVE-2025-64385criticalCWE-20

CVE-2025-64385: falha crítica em Circutor TCPRS1plus

INCORRECT SECURITY VALIDATION IN SENDING UDP FRAMES

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TCPRS1plus

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.4%
The equipment initially can be configured using the manufacturer's application, by Wi-Fi, by the web server or with the manufacturer’s software. Using the manufacturer's software, the device can be configured via UDP. Analyzing this communication, it has been observed that any aspect of the initial configuration can be changed by means of the device's MAC without the need for authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H
Produtos afetados
Circutor · TCPRS1plus
CVEs relacionadas — Circutor TCPRS1plus

No mesmo produto, das mais perigosas para as menos.

CVE-2025-64387MEDIUMCLICKJACKINGEPSS 0.4%CVE-2025-64388CRITICALDenial of service through specific packetsEPSS 0.4%CVE-2025-64386HIGHHIJACKING OF THE TOKEN AND GAINING ACCESSEPSS 0.4%CVE-2025-64389HIGHEXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXTEPSS 0.2%