Arbitrary Command Injection Vulnerability in Diviotec IP Cameras

CVE-2025-5113

What is CVE-2025-5113?

The Diviotec Professional Series IP Cameras feature a web interface that contains a vulnerability allowing for arbitrary command injection. Attackers can exploit this weakness to execute unauthorized commands on the device. Furthermore, the use of hardcoded passwords poses an additional security risk, potentially allowing unauthorized access to the cameras. This combination of vulnerabilities endangers the integrity and privacy of the users relying on these surveillance devices.

References