CVE-2025-12351

Katalog CVE

CVSS 6.8 · Medium EPSS 0,23%

Kerentanan Authorization Bypass Through User-Controlled Key. Skor CVSS 3.1 6.8 (Medium) menurut honeywell.com.

Deskripsi (NVD)

Honeywell S35 Series Cameras contains an authorization bypass Vulnerability through User controller key. An attacker could potentially exploit this vulnerability, leading to Privilege Escalation to admin privileged functionalities . Honeywell also recommends updating to the most recent version of this product, service or offering (S35 Pinhole/Kit Camera to version 2025.08.28, S35 AI Fisheye & Dual Sensor/Micro Dome/Full Color Eyeball & Bullet Camera to version 2025.08.22, S35 Thermal Camera to version 2025.08.26).

Rincian

Terbit di NVD

27 Oktober 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

6.8 (Medium), sumber honeywell.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key
CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.honeywell.com/us/en/product-security