CVE-2025-63219

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Nov 19, 2025

CISA due date

—

The record

The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and compromise system integrity.

Affected packages

Ecosystem	Package	Introduced	Fixed