CVE-2025-70962

Published: Aug 5, 2026Modified: Sep 9, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (3)

https://github.com/namaek2/CVE-2025-70962

Source: cve@mitre.org

https://www.zositech.com/

Source: cve@mitre.org

https://github.com/namaek2/CVE-2025-70962

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.