CVE-2025-50777

Katalog CVE

CVSS 7.8 · High EPSS 0,15%

Kerentanan Improper Access Control pada aziot 2mp full hd smart wi-fi cctv home security camera firmware. Skor CVSS 3.1 7.8 (High) menurut CISA ADP.

Deskripsi (NVD)

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems.

Rincian

Terbit di NVD

30 Juli 2025

Terakhir diubah

5 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control
CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 4,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/veereshgadige/aziot-cctv-cve-2025-50777 advisory pihak ketiga