CVE-2025-25985

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components.

CVSS v3.1

2.6 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS

0.30% chance of exploitation in the next 30 days, 22th percentile

Published

2025-04-18

Proof-of-concept exploits (1)

• vladko312/Research_v380_IP_camera16★ · 2025-04-12

References

• CVE Record
• NVD entry

Related

• CVE-2022-23614
• CVE-2024-6386
• CVE-2025-1302
• CVE-2025-13204
• CVE-2025-25983
• CVE-2025-25984