Insecure Protocol in Industrial IoT Gateway by Circutor
CVE-2025-64389

8.3HIGH

Key Information:

Vendor

Circutor

Status
Tcprs1plus
Vendor
CVE Published:
31 October 2025

What is CVE-2025-64389?

The web server in Circutor's Industrial IoT Gateway exposes sensitive information through exchanges conducted via an insecure protocol, making communications vulnerable to interception. This lack of encryption may lead to unauthorized access and data breaches, thereby compromising the integrity and confidentiality of critical information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

TCPRS1plus 1.0.14

References

https://cds.thalesgroup.com/es/s21sec
https://circutor.com/productos/iot-industrial-y-automatiz...
product
https://www.hackrtu.com/blog/cg-0day-en-003/
technical-description

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VĂ­ctor Bello Cuevas
Aarón Flecha Menéndez
JSON
.