critical9.8
CVE-2025-63210
The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass.
Impact
The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName flow, the attacker can gain Superuser or Operator access without providing valid credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Newtec | Celoxa504 Firmware | Version celox-21.6.13 |
| Newtec | Celoxa820 Firmware | Version celox-21.6.13 |