Skip to content
OpenAdvisories
High · 7.5 CVE-2025-63219 EUVD-2025-198155GHSA-c83q-fq82-79pj

The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on…

Published Nov 19, 2025 · Updated Nov 19, 2025 · Assigned by mitre

Description

The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and compromise system integrity.

References