{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2025-64386",
        "assignerOrgId": "50b5080a-775f-442e-83b5-926b5ca517b6",
        "state": "PUBLISHED",
        "assignerShortName": "S21sec",
        "dateReserved": "2025-10-31T13:13:35.299Z",
        "datePublished": "2025-10-31T13:42:32.743Z",
        "dateUpdated": "2025-11-03T15:51:03.421Z"
    },
    "containers": {
        "cna": {
            "affected": [
                {
                    "defaultStatus": "unknown",
                    "product": "TCPRS1plus",
                    "vendor": "Circutor",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "1.0.14",
                            "versionType": "Firmware"
                        }
                    ]
                }
            ],
            "cpeApplicability": [
                {
                    "nodes": [
                        {
                            "cpeMatch": [
                                {
                                    "criteria": "cpe:2.3:a:circutor:tcprs1plus:1.0.14:*:*:*:*:*:*:*",
                                    "vulnerable": true
                                }
                            ],
                            "negate": false,
                            "operator": "OR"
                        }
                    ],
                    "operator": "OR"
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "type": "finder",
                    "value": "Víctor Bello Cuevas"
                },
                {
                    "lang": "en",
                    "type": "finder",
                    "value": "Aarón Flecha Menéndez"
                },
                {
                    "lang": "en",
                    "type": "coordinator",
                    "value": "Iván Alonso Álvarez"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "supportingMedia": [
                        {
                            "base64": false,
                            "type": "text/html",
                            "value": " The\nequipment grants a JWT token for each connection in the timeline, but during an\nactive valid session, a hijacking of the token can be done. This will allow an\nattacker with the token modify parameters of security, access or even steal the\nsession without\nthe legitimate and active session detecting it. The web server allows the\nattacker to reuse an old session JWT token while the legitimate session is\nactive."
                        }
                    ],
                    "value": "The\nequipment grants a JWT token for each connection in the timeline, but during an\nactive valid session, a hijacking of the token can be done. This will allow an\nattacker with the token modify parameters of security, access or even steal the\nsession without\nthe legitimate and active session detecting it. The web server allows the\nattacker to reuse an old session JWT token while the legitimate session is\nactive."
                }
            ],
            "impacts": [
                {
                    "capecId": "CAPEC-593",
                    "descriptions": [
                        {
                            "lang": "en",
                            "value": "CAPEC-593 Session Hijacking"
                        }
                    ]
                }
            ],
            "metrics": [
                {
                    "cvssV4_0": {
                        "Automatable": "NOT_DEFINED",
                        "Recovery": "NOT_DEFINED",
                        "Safety": "NOT_DEFINED",
                        "attackComplexity": "HIGH",
                        "attackRequirements": "NONE",
                        "attackVector": "NETWORK",
                        "baseScore": 7.7,
                        "baseSeverity": "HIGH",
                        "exploitMaturity": "NOT_DEFINED",
                        "privilegesRequired": "NONE",
                        "providerUrgency": "NOT_DEFINED",
                        "subAvailabilityImpact": "NONE",
                        "subConfidentialityImpact": "NONE",
                        "subIntegrityImpact": "NONE",
                        "userInteraction": "PASSIVE",
                        "valueDensity": "NOT_DEFINED",
                        "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                        "version": "4.0",
                        "vulnAvailabilityImpact": "HIGH",
                        "vulnConfidentialityImpact": "HIGH",
                        "vulnIntegrityImpact": "HIGH",
                        "vulnerabilityResponseEffort": "NOT_DEFINED"
                    },
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ]
                }
            ],
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "cweId": "CWE-613",
                            "description": "CWE-613 Insufficient Session Expiration",
                            "lang": "en",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "providerMetadata": {
                "orgId": "50b5080a-775f-442e-83b5-926b5ca517b6",
                "shortName": "S21sec",
                "dateUpdated": "2025-11-03T15:51:03.421Z"
            },
            "references": [
                {
                    "tags": [
                        "product"
                    ],
                    "url": "https://circutor.com/productos/iot-industrial-y-automatizacion/conversores-y-pasarelas/product/D80010./"
                },
                {
                    "tags": [
                        "technical-description"
                    ],
                    "url": "https://www.hackrtu.com/blog/cg-0day-en-003/"
                },
                {
                    "url": "https://cds.thalesgroup.com/es/s21sec-about"
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "title": "HIJACKING OF THE TOKEN AND GAINING ACCESS",
            "x_generator": {
                "engine": "Vulnogram 0.4.0"
            }
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2025-11-03T14:22:45.570351Z",
                                "id": "CVE-2025-64386",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "total"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2025-11-03T14:22:50.552Z"
                }
            }
        ]
    }
}