CVE-2025-25985

Published: Apr 18, 2025Modified: Jun 17, 2026

2.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Exploitability: 0.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components.

Affected (1)

Products: Macro Video: V380e6 C1 Firmware

Macro Video

1 product

V380e6 C1 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Macro Video V380e6 C1 Firmware	Version 1020302

Running on/with	Platform Versions
Macro Video V380e6 C1	All versions

Related CWEs

CWE-256

Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

References (2)

https://github.com/vladko312/Research_v380_IP_camera

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25985.md

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.