CVE-2025-63667

Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints…

High · published November 12, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

🚨 An oversight in access control means anyone could waltz right into sensitive API endpoints without breaking a sweat! 🔥 Think of it like a hotel with unlocked doors to the VIP lounge — anyone can stroll in and access the confidential discussions happening inside. Simply put, if the doors are wide open, unwanted guests can crash the party! This vulnerability allows attackers to gain unrestricted access to sensitive data and operations without any authentication barrier. Imagine a scenario where an intruder can manipulate settings, steal data, or even disrupt the service entirely — a total nightmare for any organization!

Put simply

Think of it like a hotel with unlocked doors to the VIP lounge — anyone can stroll in and access the confidential discussions happening inside. Simply put, if the doors are wide open, unwanted guests can crash the party! In SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, and ASECAM v1.14.10-20240725, flawed access controls permit unauthorized access to critical API endpoints, making it easy for attackers to exploit these weaknesses.

What to do

This vulnerability allows attackers to gain unrestricted access to sensitive data and operations without any authentication barrier. Imagine a scenario where an intruder can manipulate settings, steal data, or even disrupt the service entirely — a total nightmare for any organization! To secure your systems, immediately patch to the latest versions of SIMICAM, KEVIEW, and ASECAM. Additionally, review and tighten access controls on all API endpoints to ensure proper authentication is enforced. Regular audits could also help catch any future sneaky oversights! You’ve got this! Follow these steps, and you'll be protecting your APIs like a pro. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Published
2025-11-12T00:00Z
EPSS history
Timeline
  • 12 NOV 00:00Z
    Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints…
    cvelistv5