CVE-2025-64983

Severity: high (CVSS 8.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-26 · updated 2026-10-18
Weakness: CWE-489

Description

Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code vulnerability that allows an attacker to connect via Telnet and gain access to the device.

Affected products

SwitchBot Smart Video Doorbell: before 2.01.078

References

https://jvn.jp/en/jp/JVN67185535
https://www.switch-bot.com/products/switchbot-video-doorbell?srsltid=AfmBOooGEZArqUag9p59qB8ti2fDP0vCOzxX33NGlpJ8yDlZnzC3vJ_f

Get alerted when CVE-2025-64983 or the next vulnerability affects your stack