CVE-2018-25130CWE-256

Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database

Medium · published December 24, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized access to IP cameras and door stations.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00148 · 3.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2025-12-24T19:27Z
EPSS history
Timeline
  • 24 DEC 19:27Z
    Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database
    cvelistv5