T
he Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.
References
| Link | Resource |
|---|---|
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63216_Itel%20DAB%20Gateway%20Authentication%20Bypass | Exploit Third Party Advisory Mitigation |
| https://www.itel.it/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Jan 2026, 21:54
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:itel:idgateway_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:itel:idgateway:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63216_Itel%20DAB%20Gateway%20Authentication%20Bypass - Exploit, Third Party Advisory, Mitigation | |
| References | () https://www.itel.it/ - Product | |
| First Time |
Itel idgateway Firmware
Itel idgateway Itel |
19 Nov 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 10.0 |
| CWE | CWE-384 CWE-287 |
18 Nov 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-18 22:15
Updated : 2026-01-15 21:54
NVD link : CVE-2025-63216
Mitre link : CVE-2025-63216
CVE.ORG link : CVE-2025-63216
JSON object : View
Products Affected