CVE-2025-63953

MEDIUM · 6.5 CVSS Gepubliceerd: 24-11-2025 CWE-352

Beschrijving

A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.

Vendors

Magewell

Affected products

Ultra Encode Hdmi Firmware Ultra Encode Hdmi Ultra Encode Sdi Firmware Ultra Encode Sdi Ultra Encode Hdmi Plus Firmware Ultra Encode Hdmi Plus Ultra Encode Sdi Plus Firmware Ultra Encode Sdi Plus Ultra Encode Aio Firmware Ultra Encode Aio

References

github.com
www.magewell.com