Unauthorized Camera Configuration Access in Vulnerable Products by Unknown Vendor
CVE-2025-13607
9.3CRITICAL
What is CVE-2025-13607?
A vulnerability exists in certain camera configuration systems, allowing malicious actors to retrieve sensitive configuration information, including account credentials, by accessing a specific vulnerable URL without the need for authentication. This provides an opportunity for unauthorized entities to exploit security weaknesses, potentially leading to breaches and further consequences.
Affected Version(s)
DCS-F5614-L1 0 <= 1.03.038
References
CVSS V4
Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Souvik Kandar