The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
References
| Link | Resource |
|---|---|
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63217%20_%20Itel%20DAB%20MUX%20Authentication%20Bypass | Exploit Third Party Advisory |
| https://www.itel.it/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Jan 2026, 21:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63217%20_%20Itel%20DAB%20MUX%20Authentication%20Bypass - Exploit, Third Party Advisory | |
| References | () https://www.itel.it/ - Product | |
| CPE | cpe:2.3:o:itel:id_mux_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:itel:id_mux:-:*:*:*:*:*:*:* |
|
| First Time |
Itel id Mux Firmware
Itel Itel id Mux |
19 Nov 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-288 |
18 Nov 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-18 22:15
Updated : 2026-01-15 21:57
NVD link : CVE-2025-63217
Mitre link : CVE-2025-63217
CVE.ORG link : CVE-2025-63217
JSON object : View
Products Affected
itel
- id_mux_firmware
- id_mux
CWE
CWE-288
Authentication Bypass Using an Alternate Path or Channel