What’s Vulnerable › Vulnerabilities

CVE-2019-25247: Beward N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin Vulnerability

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17
• Weakness: CWE-352

Description

Beward N100 H.264 VGA IP Camera M2.1.6 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft a malicious web page with a hidden form to add an admin user by tricking a logged-in user into submitting the form.

Affected products

• Beward R&D Co., Ltd N100 H.264 VGA IP Camera: M2.1.6.04C014

References

• https://www.beward.net
• https://www.exploit-db.com/exploits/46318
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5510.php
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5510.php

Get alerted when CVE-2019-25247 or the next vulnerability affects your stack