Remenis/CVE-2025-63667

Remenis/CVE-2025-63667

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Vatilon-based IP camera firmwares issue Session-Id tokens without verifying credentials, allowing attackers to obtain sessions and retrieve plaintext account credentials via API endpoints.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-63667↗
7.5 HIGH—

Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints without authentication.