CVE 10 CRITICAL

CVE-2025-64075_CVE-2025-64075

10 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to bypass authentication and perform administrative actions by supplying a crafted session cookie value.

AI Analysis

Path traversal vulnerability allowing remote attackers to bypass authentication and perform administrative actions

Basic Information

ID CVE-2025-64075
Source mitre
Published Feb 11, 2026 at 00:00
Modified Feb 11, 2026 at 16:40

Affected Product

Vendor Shenzhen Zhibotong Electronics
Product ZBT WE2001
Version 23.09.27
Affected Versions n/a n/a n/a

CWE Classification

AI Assessment

AI Score 10 / 10
AI Severity Critical
Vendor Shenzhen Zhibotong Electronics
Product ZBT WE2001
Version 23.09.27

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.