Vulnerability · Published Oct 31, 2025 · Assigned by S21sec
CVE-2025-64386HIJACKING OF THE TOKEN AND GAINING ACCESS
High 7.7
In plain English
A high-severity security flaw in TCPRS1plus from Circutor. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Official description
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Circutor | TCPRS1plus | 1.0.14 |
Weakness: CWE-613 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N