CVE-2025-63216

Critical

Description

The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

SeverityCritical

CVSS10.0

Exploit probability—

ProductItel Idgateway Firmware

PublishedNov 18, 2025

First seenNov 18, 2025

Weakness typeCWE-287Improper authentication CWE-384CWE-384

How to fix

Vendor advisories

github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63216_Itel%20DAB%20Gateway%20Authentication%20Bypass

Affected products

Product	Affected versions	Fixed in
itel idgateway_firmware	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.