What’s Vulnerable › Vulnerabilities

CVE-2025-64389: EXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXT

• Severity: high (CVSS 8.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-31 · updated 2026-06-17
• Weakness: CWE-319

Description

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol.

Affected products

• Circutor TCPRS1plus: 1.0.14

References

• https://cds.thalesgroup.com/es/s21sec
• https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010./
• https://www.hackrtu.com/blog/cg-0day-en-003/

Get alerted when CVE-2025-64389 or the next vulnerability affects your stack