The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
References
| Link | Resource |
|---|---|
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63216_Itel%20DAB%20Gateway%20Authentication%20Bypass | Exploit Third Party Advisory Mitigation |
| https://www.itel.it/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Jan 2026, 21:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Itel
Itel idgateway Firmware Itel idgateway |
|
| CPE | cpe:2.3:o:itel:idgateway_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:itel:idgateway:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63216_Itel%20DAB%20Gateway%20Authentication%20Bypass - Exploit, Third Party Advisory, Mitigation | |
| References | () https://www.itel.it/ - Product |
19 Nov 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 CWE-384 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 10.0 |
18 Nov 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-18 22:15
Updated : 2026-01-15 21:54
NVD link : CVE-2025-63216
Mitre link : CVE-2025-63216
CVE.ORG link : CVE-2025-63216
JSON object : View
Products Affected
itel
- idgateway
- idgateway_firmware