CVE-2025-62674

Missing Authentication for RTSP in iCam Cameras

CVSS 7 HIGHEPSS 0.2%CWE-306

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

20 nov 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an attacker unauthorized access to camera configuration information.

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Produtos afetados

iCam365 · P201 iCam365 · QC021

Referências

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-02.json https://icam365.net/en/aboutUs/https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-02