What’s Vulnerable › Vulnerabilities

CVE-2019-25246: Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 18.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-24 · updated 2026-06-17
• Weakness: CWE-22

Description

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameter. Attackers can exploit the fileread script or SendCGICMD API to access sensitive files like /etc/passwd and /etc/issue by supplying absolute file paths.

Affected products

• Beward R&D Co., Ltd N100 H.264 VGA IP Camera: M2.1.6.04C014

References

• https://www.beward.net
• https://www.exploit-db.com/exploits/46320
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5511.php
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5511.php

Get alerted when CVE-2019-25246 or the next vulnerability affects your stack