LOW🇵🇱 Wersja polska

CVE-2025-25985

CVSS 2.6v3.1pub. 2025-04-18upd. 2025-06-25

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

  • Macro Video V380e6 C1

    HW
    Macro-Video
    all versions

  • Macro Video V380e6 C1 Firmware

    OS
    Macro-Video
    1020302
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2025-25984MEDIUM6.8same product

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physica...

CVE-2023-33741HIGH7.5same vendor

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device.

CVE-2025-25983LOW3.4same vendor

Podatność w aplikacji Android V380 Pro firmy Macro-video Technologies Co., Ltd w wersjach 2.1.44 i 2.1.64 pozw...