The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
References
| Link | Resource |
|---|---|
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63224_Itel%20DAB%20Encoder%20Authentication%20Bypass | Exploit Third Party Advisory |
| https://www.itel.it/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Jan 2026, 19:46
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Itel
Itel idenc Itel idenc Firmware |
|
| References | () https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63224_Itel%20DAB%20Encoder%20Authentication%20Bypass - Exploit, Third Party Advisory | |
| References | () https://www.itel.it/ - Product | |
| CPE | cpe:2.3:h:itel:idenc:-:*:*:*:*:*:*:* cpe:2.3:o:itel:idenc_firmware:-:*:*:*:*:*:*:* |
19 Nov 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 10.0 |
| CWE | CWE-287 CWE-384 |
19 Nov 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-19 16:15
Updated : 2026-01-15 19:46
NVD link : CVE-2025-63224
Mitre link : CVE-2025-63224
CVE.ORG link : CVE-2025-63224
JSON object : View
Products Affected
itel
- idenc_firmware
- idenc