5.7

CVE-2025-63952

Exploit
A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Magewell ≫ Pro Convert Hdmi Tx Firmware Version1.2.213
   Magewell ≫ Pro Convert Hdmi Tx Version-
Magewell ≫ Pro Convert Sdi Tx Firmware Version1.2.213
   Magewell ≫ Pro Convert Sdi Tx Version-
Magewell ≫ Pro Convert Aes67 Firmware Version1.2.213
   Magewell ≫ Pro Convert Aes67 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.056
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 5.7 2.1 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://www.magewell.com
Vendor Advisory
https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-63952
Third Party Advisory
Exploit