CVE-2025-64387: Circutor TCPRS1PLUS

Medium severity, CVSS 5.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.

Affected products

• Circutor TCPRS1PLUS: version 1.0.14 only

Published 2025-10-31. Last modified 2026-06-17.