CVE-2025-64389

HIGH

Device Web Server - Info Disclosure

Title source: llm
STIX 2.1

Description

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol.

Scores

CVSS v4 8.3
EPSS 0.0020
EPSS Percentile 10.2%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:L/SA:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
Circutor/TCPRS1plus 1.0.14
Published Oct 31, 2025
Tracked Since Feb 18, 2026