CVE-2025-64389

HIGH

Device Web Server - Info Disclosure

Title source: llm
STIX 2.1

Description

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol.

Scores

CVSS v4 8.3
EPSS 0.0003
EPSS Percentile 8.6%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:L/SA:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
Circutor/TCPRS1plus 1.0.14
Published Oct 31, 2025
Tracked Since Feb 18, 2026