PT-2025-47460 · Itel · Itel Iso Fm Sfn Adapter+1

Published 2025-11-19 · Updated 2025-11-24 · CVE-2025-63219

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ITEL ISO FM SFN Adapter versions ISO2 2.0.0.0 and WebServer 2.0

Description The ITEL ISO FM SFN Adapter is susceptible to session hijacking because of inadequate session management on the /home.html endpoint. An attacker can gain access to an active session without needing to authenticate, potentially enabling control of the device, modification of configurations, and compromise of system integrity.

Recommendations Apply updates to address the improper session management on the /home.html endpoint for ITEL ISO FM SFN Adapter version ISO2 2.0.0.0. Apply updates to address the improper session management on the /home.html endpoint for ITEL ISO FM SFN Adapter version WebServer 2.0.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-63219

Affected Products

Itel Iso Fm Sfn Adapter

Vwebserver

References · 7

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63219_ITEL%20ISO%20FM%20SFN%20Adapter%20-%20Session%20Hijacking · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63219 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63219 · Vendor Advisory
• https://itel.it · Note
• https://twitter.com/CVEnew/status/1991187302148976757 · Twitter Post
• https://t.me/cveNotify/143370 · Telegram Post
• https://twitter.com/cracbot/status/1992911130885509600 · Twitter Post