CVE Explorer
CVE-2025-64386
The
equipment grants a JWT token for each connection in the timeline, but during an
active valid session, a hijacking of the token can be done. This will allow an
attacker with the token modify parameters of security, access or even steal the
session without
the legitimate and active session detecting it. The web server allows the
attacker to reuse an old session JWT token while the legitimate session is
active.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unknown","product":"TCPRS1plus","vendor":"Circutor","versions":[{"status":"affected","version":"1.0.14","versionType":"Firmware"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:afd061c82f93f560018c8a5bad56a04c676b5695ee389d24dd814e79a8c5e954 · sha256:af8ea52637a9b7ec… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":7.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpac…
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:afd061c82f93f560018c8a5bad56a04c676b5695ee389d24dd814e79a8c5e954 · sha256:af8ea52637a9b7ec… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-613","description":"CWE-613 Insufficient Session Expiration","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:afd061c82f93f560018c8a5bad56a04c676b5695ee389d24dd814e79a8c5e954 · sha256:af8ea52637a9b7ec… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"url":"https://cds.thalesgroup.com/es/s21sec-about"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:afd061c82f93f560018c8a5bad56a04c676b5695ee389d24dd814e79a8c5e954 · sha256:af8ea52637a9b7ec… · /containers/cna/references/2
{"tags":["product"],"url":"https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010./"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:afd061c82f93f560018c8a5bad56a04c676b5695ee389d24dd814e79a8c5e954 · sha256:af8ea52637a9b7ec… · /containers/cna/references/0
{"tags":["technical-description"],"url":"https://www.hackrtu.com/blog/cg-0day-en-003/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:afd061c82f93f560018c8a5bad56a04c676b5695ee389d24dd814e79a8c5e954 · sha256:af8ea52637a9b7ec… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.