CVE-2025-70962CWE-284broken-access-control

CVE-2025-70962

High · published August 5, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00504 · 42.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-08-05T18:16Z
References (3)
https://github.com/namaek2/CVE-2025-70962 · [email protected]https://www.zositech.com/ · [email protected]https://github.com/namaek2/CVE-2025-70962 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 05 AUG 00:00Z
    Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control
    cvelistv5