cvedb.io
CVE-2025-63224
CRITICAL · CVSS 10
EPSS exploitation probability: 0%
Published 2025-11-19T16:15:48.450 · Last modified 2026-06-17T09:52:58.767

Summary

The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

Affected products

itel — idenc_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when itel ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.