Insecure Protocol in Industrial IoT Gateway by Circutor
CVE-2025-64389

8.3HIGH

Key Information:

Vendor

Circutor

Status
Tcprs1plus
Vendor
CVE Published:
31 October 2025

What is CVE-2025-64389?

The web server in Circutor's Industrial IoT Gateway exposes sensitive information through exchanges conducted via an insecure protocol, making communications vulnerable to interception. This lack of encryption may lead to unauthorized access and data breaches, thereby compromising the integrity and confidentiality of critical information.

Affected Version(s)

TCPRS1plus 1.0.14

References

https://cds.thalesgroup.com/es/s21sec
https://circutor.com/productos/iot-industrial-y-automatiz...
product

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VĂ­ctor Bello Cuevas
Aarón Flecha Menéndez
JSON
.
CVE-2025-64389 : Insecure Protocol in Industrial IoT Gateway by Circutor