CVE-2025-63210
Published: 19 November 2025
Description
The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName…
more
flow, the attacker can gain Superuser or Operator access without providing valid credentials.
Mitigating Controls (NIST 800-53 r5)AI
Enforces cryptographic mechanisms to protect the confidentiality and integrity of transmitted authentication responses, directly preventing man-in-the-middle modification during the loginWithUserName flow.
Mandates robust organizational user identification and authentication mechanisms that resist improper authentication and bypasses via assumed-immutable data like forged login responses.
Requires timely identification, reporting, and remediation of flaws such as this firmware-specific authentication bypass vulnerability.
Security SummaryAI
CVE-2025-63210 is an authentication bypass vulnerability in Newtec Celox UHD devices, specifically models CELOXA504 and CELOXA820 running firmware version celox-21.6.13. The issue enables an attacker to modify intercepted responses from the /celoxservice endpoint and inject a forged response body during the loginWithUserName flow, allowing Superuser or Operator access without valid credentials. It carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and maps to CWEs 287 (Improper Authentication), 302 (Authentication Bypass by Assumed-Immutable Data), and 303 (Incorrect Implementation of Authentication Algorithm).
A remote, unauthenticated attacker with the ability to intercept network traffic to the affected device can exploit this vulnerability through a man-in-the-middle technique. By altering the login response, the attacker achieves privilege escalation to Superuser or Operator levels, potentially compromising confidentiality, integrity, and availability of the device with high impact and no user interaction required.
Details on the vulnerability, including proof-of-concept information, are documented in a GitHub research repository at https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63210_Newtec%20Celox%20UHD%20Authentication%20Bypass%20_%20Privilege%20Escalation, with the vendor site available at https://www.newtec.com/. Security practitioners should consult these references for any vendor-provided advisories, patches, or mitigation guidance.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability is an authentication bypass in a public-facing web endpoint (/celoxservice) exploitable via man-in-the-middle (T1557) to gain superuser/operator privileges (T1068), directly mapping to exploitation of public-facing applications (T1190).