What’s Vulnerable › Vulnerabilities

CVE-2025-64387: CLICKJACKING

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-31 · updated 2026-06-17
• Weakness: CWE-1021

Description

The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.

Affected products

• Circutor TCPRS1plus: 1.0.14

References

• https://cds.thalesgroup.com/es/s21sec
• https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010./
• https://www.hackrtu.com/blog/cg-0day-en-003/

Get alerted when CVE-2025-64387 or the next vulnerability affects your stack