Password Protection Bypass in Survision LPR Camera System
CVE-2025-12108

9.3CRITICAL

Key Information:

Vendor

Survision

Status
License Plate Recognition Camera
Vendor
CVE Published:
4 November 2025

What is CVE-2025-12108?

The Survision LPR Camera system is vulnerable due to the lack of default password protection, enabling unauthorized access to its configuration wizard without a login prompt or credential verification. This weakness poses significant security risks, as malicious actors can manipulate system settings without any user authentication.

Affected Version(s)

License Plate Recognition Camera All versions

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-3...
government-resource

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Souvik Kandar of Microsec (microsec.io) reported this vulnerability to CISA.
JSON
.
CVE-2025-12108 : Password Protection Bypass in Survision LPR Camera System