Skip to content
Noroxi

xtooltech records

4 published records for vendor xtooltech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2025-63434
    35Monitor

    The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure.

    HighCVSS 8.8No exploitEPSS 0%

    xtooltech · xtool anyscanNov 24, 2025

  • CVE-2025-63433
    18Monitor

    Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata.

    MediumCVSS 4.6No exploitEPSS 0%

    xtooltech · xtool anyscanNov 24, 2025

  • CVE-2025-63432
    18Monitor

    Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation.

    MediumCVSS 4.6No exploitEPSS 0%

    xtooltech · xtool anyscanNov 24, 2025

  • CVE-2025-63435
    17Monitor

    Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function.

    MediumCVSS 4.3No exploitEPSS 0%

    xtooltech · xtool anyscanNov 24, 2025