CVE-2025-25985

Severity: low (CVSS 2.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-18 · updated 2026-06-17
Weakness: CWE-256

Description

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components.

Affected products

Macro-Video V380E6 C1 Firmware: 1020302

References

https://github.com/vladko312/Research_v380_IP_camera
https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25985.md

Get alerted when CVE-2025-25985 or the next vulnerability affects your stack