CVE-2025-59479
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product.
Risk Assessment
An attacker can trick a logged-in user into clicking malicious content, potentially resulting in unauthorized operations on the device, such as configuration changes or actions performed on behalf of the user. This may compromise device and network security.
Recommendation
Update CHOCO TEI WATCHER mini software to the latest version if a patch is available. Until then, avoid clicking suspicious links while logged into the product and consider restricting access to the device.
Other vulnerabilities in CHOCO TEI WATCHER mini
See all- CVE-2025-66357Medium
The CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions. When the Video Download feature is in a specific communication state, the product's resources may be consumed abnormally.
- CVE-2025-61976High
The CHOCO TEI WATCHER mini (IB-MCT001) has an issue with improper check for unusual or exceptional conditions. A remote attacker can send a specially crafted request to the Video Download interface, potentially causing the system to become unresponsive.
Original NVD description (English source)
CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS