Cross-Site Request Forgery Vulnerability in i-PRO Surveillance Cameras
CVE-2025-36513

5.1MEDIUM

Key Information:

Vendor

I-pro Co., Ltd.

Status
Surveillance Cameras Provided By I-pro Co., Ltd.
Vendor
CVE Published:
6 June 2025

What is CVE-2025-36513?

A cross-site request forgery vulnerability has been identified in surveillance cameras from i-PRO Co., Ltd. This weakness allows an attacker to trick a logged-in user into visiting a malicious page, potentially leading to unauthorized operations on the user's account without their consent. It is essential for users to ensure that they are utilizing the latest security updates and to implement mitigation strategies to protect their devices.

Affected Version(s)

Surveillance cameras provided by i-PRO Co., Ltd. see the information provided by the vendor

References

https://i-pro.com/products_and_solutions/en/surveillance/...
https://jvn.jp/en/jp/JVN10964289/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-36513 : Cross-Site Request Forgery Vulnerability in i-PRO Surveillance Cameras