CVE-2025-64983CWE-489

CVE-2025-64983

High · published November 26, 2025

CVSS v3.0
8.0
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

🚨 An active debug code vulnerability in Smart Video Doorbell firmware could let attackers waltz in through Telnet, gaining control over your device! 🔥 Think of this like leaving your front door wide open with a sign that says, 'Please come in!' The debug code acts as a key that allows attackers to bypass security, much like an unchecked guest list letting anyone crash your party. If exploited, an attacker could access your doorbell’s camera and microphone, potentially surveilling your home unnoticed. This could lead to privacy invasions, unauthorized control of the device, or even worse — letting them see when you're not home!

Put simply

Think of this like leaving your front door wide open with a sign that says, 'Please come in!' The debug code acts as a key that allows attackers to bypass security, much like an unchecked guest list letting anyone crash your party. This vulnerability allows unauthorized access via Telnet because the debug code is still active in firmware versions prior to 2.01.078. Effectively, anyone who knows this vulnerability can connect and interact with the device without any authentication.

What to do

If exploited, an attacker could access your doorbell’s camera and microphone, potentially surveilling your home unnoticed. This could lead to privacy invasions, unauthorized control of the device, or even worse — letting them see when you're not home! Update your Smart Video Doorbell firmware to version 2.01.078 or later to close this security gap immediately. Additionally, consider disabling Telnet access altogether if it's not needed, and regularly check for firmware updates to keep your device secure. You've got this! With these steps, you can safeguard your home like a pro! 🛡️

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00308 · 22.5th percentile
Weakness
CWE-489 · Active Debug Code
Published
2025-11-26T10:16Z
References (2)
EPSS history
Timeline
  • 26 NOV 04:32Z
    Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code vulnerability that allows an attacker to connect via Telnet and gain…
    cvelistv5