CVE-2025-50777

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-50777
The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://aziot.com Broken Link
https://github.com/veereshgadige/aziot-cctv-cve-2025-50777 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:aziot:2mp_full_hd_smart_wi-fi_cctv_home_security_camera_firmware:1.00.02:*:*:*:*:*:*:*
cpe:2.3:h:aziot:2mp_full_hd_smart_wi-fi_cctv_home_security_camera:-:*:*:*:*:*:*:*
History

06 Aug 2025, 16:22

Type Values Removed Values Added
References () http://aziot.com - () http://aziot.com - Broken Link
References () https://github.com/veereshgadige/aziot-cctv-cve-2025-50777 - () https://github.com/veereshgadige/aziot-cctv-cve-2025-50777 - Third Party Advisory
CPE cpe:2.3:h:aziot:2mp_full_hd_smart_wi-fi_cctv_home_security_camera:-:*:*:*:*:*:*:*
cpe:2.3:o:aziot:2mp_full_hd_smart_wi-fi_cctv_home_security_camera_firmware:1.00.02:*:*:*:*:*:*:*
First Time Aziot
Aziot 2mp Full Hd Smart Wi-fi Cctv Home Security Camera Firmware
Aziot 2mp Full Hd Smart Wi-fi Cctv Home Security Camera

31 Jul 2025, 18:42

Type Values Removed Values Added
Summary
  • (es) El firmware de AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (versión V1.00.02) contiene una vulnerabilidad de control de acceso incorrecto que permite a atacantes locales obtener acceso root. Una vez accedido, el dispositivo expone datos críticos, como credenciales Wi-Fi y credenciales de servicio ONVIF almacenadas en texto plano, lo que permite una mayor vulnerabilidad de la red y los sistemas conectados.

30 Jul 2025, 20:15

Type Values Removed Values Added
CWE CWE-312
CWE-284
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

30 Jul 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-30 19:15

Updated : 2025-08-06 16:22

NVD link : CVE-2025-50777

Mitre link : CVE-2025-50777

CVE.ORG link : CVE-2025-50777

JSON object : View

Products Affected

aziot

  • 2mp_full_hd_smart_wi-fi_cctv_home_security_camera
  • 2mp_full_hd_smart_wi-fi_cctv_home_security_camera_firmware
CWE
CWE-284

Improper Access Control

CWE-312

Cleartext Storage of Sensitive Information