Risky Cryptographic Algorithm in FNKvision FNK-GU2 Wireless IP Camera Firmware

CVE-2025-7214

What is CVE-2025-7214?

A vulnerability in FNKvision's FNK-GU2 Wireless IP Camera affects versions up to 40.1.7, identified by a problematic function related to the /etc/shadow file. The vulnerability arises from the use of a risky MD5 cryptographic algorithm, which can potentially be exploited physically on the device. Although the complexity of the attack is considerable, public disclosure suggests that the exploit may be leveraged by malicious actors. Users should take preventive measures and consider updating or securing their devices against potential exploitation.

References