1. Home
  2. CVE Database
  3. CVE-2025-63224
CRITICAL · 10.0

CVE-2025-63224

The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authe...

Vulnerability Description

The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ItelIdenc Firmware-
ItelIdenc-

Related Weaknesses (CWE)

CWE-384CWE-287

References

FAQ

What is CVE-2025-63224?

CVE-2025-63224 is a vulnerability with a CVSS score of 10.0 (CRITICAL). The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authe...

How severe is CVE-2025-63224?

CVE-2025-63224 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-63224?

Check the references section above for vendor advisories and patch information. Affected products include: Itel Idenc Firmware, Itel Idenc.