CVE-2025-25211 Weak cryptography in CHOCO TEI WATCHER mini (IB-MCT001)

Critical 9.8 Published 31 Mar 2025 Updated 31 Mar 2025

Weak password requirements in CHOCO TEI WATCHER mini allow attackers to gain unauthorized access via brute-force attacks.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-25211?

CVE-2025-25211 is a critical vulnerability in Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001), published on 31 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login.

Weakness: CWE-521

Which versions are affected by CVE-2025-25211?

How do I fix CVE-2025-25211?

No fix has been published for CVE-2025-25211 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-25211 being exploited?

There is no known exploitation of CVE-2025-25211 in the wild and no public exploit code.

Sources

Also known as GHSA-grpc-r8w2-528w.