CVE-2018-25130

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized access to IP cameras and door stations.

CVSS v4.0

6.8 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.15% chance of exploitation in the next 30 days, 4th percentile

Published

2025-12-24

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/46267

References

• CVE Record
• NVD entry

Related

• CVE-2018-25129
• CVE-2018-25131
• CVE-2018-25128
• CVE-2018-25132
• CVE-2018-25127
• CVE-2018-25133