Remote Code Execution Vulnerability in OEM IP Camera by Shenzhen Liandian Communication Technology LTD

CVE-2025-7503

What is CVE-2025-7503?

An OEM IP camera from Shenzhen Liandian Communication Technology LTD is vulnerable due to the exposure of an enabled Telnet service on port 23. The Telnet interface utilizes undocumented default credentials, allowing unauthorized access. Users cannot configure or disable this service through the web interface or user documentation. An attacker with network access can exploit this weakness to gain root-level access to the device, facilitating remote code execution and privilege escalation. Currently, there is no resolution or firmware update provided by the vendor.

References