CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.38% chance of exploitation in the next 30 days, 31th percentile

Published

2026-08-05

Proof-of-concept exploits (1)

• namaek2/CVE-2025-70962

References

• CVE Record
• NVD entry

Related

• CVE-2025-7096
• CVE-2025-7097
• CVE-2025-70958
• CVE-2025-70974
• CVE-2025-7095
• CVE-2025-7098