PatchTheCVEmagewell vulnerabilities
Recent CVEs affecting magewell products. 2 tracked.
magewell has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-24. Highest priority: CVE-2025-63953 (score 29/100).
- CVE-2025-63953 MEDIUM 6.5 MITIGATE MITIGATE A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 a
- CVE-2025-63952 MEDIUM 5.7 MITIGATE MITIGATE A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 a
FAQ
How do I fix magewell vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is magewell being exploited right now?
None of the tracked magewell CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which magewell CVE should I patch first?
CVE-2025-63953 currently ranks highest (29/100): A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 a.
Products
- pro convert 12g sdi 4k plus firmware
- pro convert hdmi 4k plus firmware
- pro convert hdmi plus firmware
- pro convert hdmi tx firmware
- pro convert sdi 4k plus firmware
- pro convert sdi plus firmware
- ultra encode aio firmware
- ultra encode hdmi firmware
- ultra encode hdmi plus firmware
- ultra encode sdi firmware
- ultra encode sdi plus firmware