CVE-2025-59479CWE-1021

CVE-2025-59479

Medium · published December 16, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2025-12-16T10:16Z
Affected products (1)
ProductVersionsFixed in
inaba/ib-mct001_firmwareall versions—
References (2)
https://jvn.jp/en/vu/JVNVU92827367/ · [email protected]https://www.inaba.co.jp/files/chocomini_vulnerability_newly_identified.pdf · [email protected]
EPSS history
Timeline
  • 16 DEC 04:48Z
    CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames
    cvelistv5