medium6.5
CVE-2025-63953
A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts vi…
Impact
A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magewell | Ultra Encode Hdmi Firmware | Version 2.3.206 |
| Magewell | Ultra Encode Sdi Firmware | Version 2.3.206 |
| Magewell | Ultra Encode Hdmi Plus Firmware | Version 2.3.206 |
| Magewell | Ultra Encode Sdi Plus Firmware | Version 2.3.206 |
| Magewell | Ultra Encode Aio Firmware | Version 2.3.206 |