CVE-2025-61976CWE-754

CVE-2025-61976

High · published December 16, 2025

CVSS v3.0
7.5
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

⚡ A single crafted request is all it takes to crash the CHOCO TEI WATCHER mini—just like a prankster sending a fake delivery to your house and causing all kinds of chaos! 📦 Think of the Video Download interface like a busy restaurant kitchen. If an unexpected order comes in, one that the staff can’t handle, the whole operation can grind to a halt. When exploited, a remote attacker could cause the device to become unresponsive, effectively turning your nifty gadget into a paperweight. This is no small inconvenience—it could disrupt streaming or monitoring services when you need them most. Imagine trying to catch your favorite show, and suddenly, your device just freezes up!

Put simply

Think of the Video Download interface like a busy restaurant kitchen. If an unexpected order comes in, one that the staff can’t handle, the whole operation can grind to a halt. This vulnerability arises from an improper check for unusual or exceptional conditions in the Video Download interface, allowing attackers to send specially crafted requests that can overwhelm the system.

What to do

When exploited, a remote attacker could cause the device to become unresponsive, effectively turning your nifty gadget into a paperweight. This is no small inconvenience—it could disrupt streaming or monitoring services when you need them most. Imagine trying to catch your favorite show, and suddenly, your device just freezes up! To mitigate this issue, update your CHOCO TEI WATCHER mini software to the latest version that addresses this vulnerability. Additionally, consider implementing rate limiting on the Video Download interface to prevent abuse. Regularly check for firmware updates to stay secure! You've got this! By taking these steps, you'll ensure your device remains safe and sound. 🛡️

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2025-12-16T10:16Z
Affected products (1)
ProductVersionsFixed in
inaba/ib-mct001_firmwareall versions—
References (2)
EPSS history
Timeline
  • 16 DEC 04:48Z
    CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions
    cvelistv5