Client-side Authentication Flaw in CHOCO TEI WATCHER Mini by Inaba

CVE-2025-24517

What is CVE-2025-24517?

A vulnerability exists in all versions of the CHOCO TEI WATCHER mini (IB-MCT001) due to insufficient client-side authentication mechanisms. If exploited, a remote attacker could gain unauthorized access to sensitive login credentials, including the product's login password, without needing prior authentication. This flaw poses a significant security risk, potentially allowing malicious actors to compromise accounts and systems associated with the device.

References