CVE-2025-63952

🗓️ 24 Nov 2025 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 7 Views

CSRF in Magewell Pro Convert allows account creation via crafted GET to /mwapi?method=add-user.

Reporter	Title	Published	Views	Family All 8
CNNVD	Magewell Ultra Encode 安全漏洞	24 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-63952	24 Nov 202500:00	–	cvelist
EUVD	EUVD-2025-198970	24 Nov 202518:31	–	euvd
NVD	CVE-2025-63952	24 Nov 202517:16	–	nvd
OSV	CVE-2025-63952	24 Nov 202517:16	–	osv
Positive Technologies	PT-2025-47943	24 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-63952	25 Nov 202500:17	–	redhatcve
Vulnrichment	CVE-2025-63952	24 Nov 202500:00	–	vulnrichment

NVD

Node

magewell pro_convert_hdmi_4k_plus_firmwareMatch1.2.213

AND

magewell pro_convert_hdmi_4k_plusMatch-

Node

magewell pro_convert_hdmi_plus_firmwareMatch1.2.213

AND

magewell pro_convert_hdmi_plusMatch-

Node

magewell pro_convert_hdmi_tx_firmwareMatch1.2.213

AND

magewell pro_convert_hdmi_txMatch-

Node

magewell pro_convert_12g_sdi_4k_plus_firmwareMatch1.2.213

AND

magewell pro_convert_12g_sdi_4k_plusMatch-

Node

magewell pro_convert_sdi_4k_plus_firmwareMatch1.2.213

AND

magewell pro_convert_sdi_4k_plusMatch-

Node

magewell pro_convert_sdi_plus_firmwareMatch1.2.213

AND

magewell pro_convert_sdi_plusMatch-

Node

magewell pro_convert_sdi_tx_firmwareMatch1.2.213

AND

magewell pro_convert_sdi_txMatch-

Node

magewell pro_convert_for_ndi_to_hdmi_firmwareMatch1.2.213

AND

magewell pro_convert_for_ndi_to_hdmiMatch-

Node

magewell pro_convert_for_ndi_to_hdmi_4k_firmwareMatch1.2.213

AND

magewell pro_convert_for_ndi_to_hdmi_4kMatch-

Node

magewell pro_convert_for_ndi_to_aio_firmwareMatch1.2.213

AND

magewell pro_convert_for_ndi_to_aioMatch-

Node

magewell pro_convert_for_ndi_to_sdi_firmwareMatch1.2.213

AND

magewell pro_convert_for_ndi_to_sdiMatch-

Node

magewell pro_convert_aes67_firmwareMatch1.2.213

AND

magewell pro_convert_aes67Match-

Node

magewell pro_convert_audio_dx_firmwareMatch1.2.213

AND

magewell pro_convert_audio_dxMatch-

Source	Link
github	www.github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-63952
magewell	www.magewell.com/

30 Dec 2025 18:13Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.7

EPSS0.00017

SSVC

cross site forgery magewell pro convert add user method get request flaw