CVE-2025-7742CWE-288

Authentication Bypass in LG Innotek Camera

High · published July 24, 2025

CVSS v4.0
8.3
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00733 · 53.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-07-24T23:28Z
EPSS history
Timeline
  • 24 JUL 23:28Z
    Authentication Bypass in LG Innotek Camera
    cvelistv5