What’s Vulnerable › Vulnerabilities

CVE-2025-64386: HIJACKING OF THE TOKEN AND GAINING ACCESS

• Severity: high (CVSS 7.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-31 · updated 2026-06-17
• Weakness: CWE-613

Description

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.

Affected products

• Circutor TCPRS1plus: 1.0.14

References

• https://cds.thalesgroup.com/es/s21sec-about
• https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010./
• https://www.hackrtu.com/blog/cg-0day-en-003/

Get alerted when CVE-2025-64386 or the next vulnerability affects your stack