CVE-2025-7503

The vulnerability results from the presence of hardcoded default credentials in the device firmware (CWE-798). The Telnet service is enabled by default, is not disclosed in the web interface or user documentation, preventing the administrator from consciously managing it or disabling it. An attacker with network access to port 23 can authenticate without restriction using the default credentials and obtain an interactive system shell with root privileges.

Attacker gains full control of the device at root level, enabling remote code execution (RCE), privilege escalation (LPE), configuration modification, eavesdropping on camera footage, and potential exploitation of the device as an entry point to the local network.

No official patch or firmware update is available — the manufacturer was unreachable. It is recommended to immediately isolate devices from public networks, block access to TCP port 23 (Telnet) at the firewall or network switch level, and consider decommissioning devices until an official patch is released by the manufacturer.

OEM IP cameras manufactured by Shenzhen Liandian Communication Technology LTD with firmware AppFHE1_V1.0.6.0 (Kernel: KerFHE1_PTZ_WIFI_V3.1.1, Hardware: HwFHE1_WF6_PTZ_WIFI_20201218). Affects devices from the V380 CCTV IP Camera family.