CVE-2025-53702CWE-755

CVE-2025-53702

Medium · published October 23, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

Vilar VS-IPC1002 IP cameras are vulnerable to DoS (Denial-of-Service) attacks. An unauthenticated attacker on the same local network might send a crafted request to /cgi-bin/action endpoint and render the device completely unresponsive. A manual restart of the device is required.

The vendor did not respond in any way. Only version 1.1.0.18 was tested, other versions might be vulnerable as well.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2025-10-23T18:15Z
Affected products (1)
ProductVersionsFixed in
vimicro/vs-ipc1002_firmwareall versions—
References (1)
https://cert.pl/en/posts/2025/10/CVE-2025-53701 · [email protected]
EPSS history
Timeline
  • 23 OCT 13:39Z
    DoS vulnerability in Vilar VS-IPC1002 IP cameras
    cvelistv5