1. Home
  2. CVE Database
  3. CVE-2025-63216
CRITICAL · 10.0

CVE-2025-63216

The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to auth...

Vulnerability Description

The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ItelIdgateway Firmware-
ItelIdgateway-

Related Weaknesses (CWE)

CWE-384CWE-287

References

FAQ

What is CVE-2025-63216?

CVE-2025-63216 is a vulnerability with a CVSS score of 10.0 (CRITICAL). The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to auth...

How severe is CVE-2025-63216?

CVE-2025-63216 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-63216?

Check the references section above for vendor advisories and patch information. Affected products include: Itel Idgateway Firmware, Itel Idgateway.