CVE-2025-64075Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to bypass authentication and perform administrative actions by supplying a crafted session cookie value.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds239d
Disclosure
CVE-2025-64075 Path Traversal Authentication Bypass in ZBT WE2001 Router Firmware 23.09.27 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-64075
Post summary
The text announces a path traversal authentication bypass (CVE‑2025‑64075) affecting ZBT WE2001 Router Firmware 23.09.27, with no PoC, exploit, or patch details provided.
1001061
4.0K followersView on X
The Hacker Wire@TheHackerWire239d
Disclosure
🔴 CVE-2025-64075 - Critical A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remote attackers to bypass authentication and perform administrativ... https://www.thehackerwire.com/vulnerability/CVE-2025-64075/ https://t.co/a3BY7FuerY
Post summary
The tweet announces a path‑traversal flaw in Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 that enables authentication bypass and administrative access.
0000078
112 followersView on X

Explore more

Back to dashboard