CVE-2025-6951: SAFECAM X300 FTP Service default credentials

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-01 · updated 2026-06-17
Weakness: CWE-1392

Description

A vulnerability classified as problematic was found in SAFECAM X300 up to 20250611. This vulnerability affects unknown code of the component FTP Service. The manipulation leads to use of default credentials. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

SAFECAM X300: 20250611

References

https://github.com/geo-chen/SAFECAM
https://vuldb.com/?ctiid.314488
https://vuldb.com/?id.314488
https://vuldb.com/?submit.595454

Get alerted when CVE-2025-6951 or the next vulnerability affects your stack