Unauthorized Camera Configuration Access in Vulnerable Products by Unknown Vendor
CVE-2025-13607

9.3CRITICAL

Key Information:

Vendor

D-link

Vendor
CVE Published:
10 December 2025

What is CVE-2025-13607?

A vulnerability exists in certain camera configuration systems, allowing malicious actors to retrieve sensitive configuration information, including account credentials, by accessing a specific vulnerable URL without the need for authentication. This provides an opportunity for unauthorized entities to exploit security weaknesses, potentially leading to breaches and further consequences.

Affected Version(s)

DCS-F5614-L1 0 <= 1.03.038

References

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Souvik Kandar
.
CVE-2025-13607 : Unauthorized Camera Configuration Access in Vulnerable Products by Unknown Vendor