CVE-2025-63210
CriticalSummary
The Newtec Celox UHD (models CELOXA504, CELOXA820) running firmware celox-21.6.13 is vulnerable to an authentication bypass. An attacker can modify intercepted responses from the /celoxservice endpoint, injecting a forged response during login to gain Superuser or Operator access without valid credentials.
Risk Assessment
An attacker can gain privileged access to the device, potentially leading to full system compromise.
Recommendation
Apply firmware updates from the vendor and monitor network traffic for suspicious modifications.
Original NVD description (English source)
The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName flow, the attacker can gain Superuser or Operator access without providing valid credentials.