CVE-2025-25985: Low severity macro-video technologies v380e6_c1 ip camera vulnerability

Published Apr 18, 2025

Updated

An issue in Macro-video Technologies Co.,Ltd V380E6C1 IP camera (HwHsAKPIQpWFXHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/userinfo.ini components.

Affected Software

3 affected components

Macro-video Technologies V380E6_C1 IP camera

All of the following

Macro-video V380e6 C1 Firmware=1020302

Macro-video V380e6 C1

Event History

Apr 18, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-25985?

CVE-2025-25985 has a high severity level due to its potential for arbitrary code execution by a physically proximate attacker.

How do I fix CVE-2025-25985?

To fix CVE-2025-25985, ensure that your Macro-video Technologies V380E6_C1 IP camera firmware is updated to the latest version provided by the manufacturer.

What components are affected by CVE-2025-25985?

CVE-2025-25985 affects the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components of the V380E6_C1 IP camera.

Who is affected by CVE-2025-25985?

Users of the Macro-video Technologies V380E6_C1 IP camera are affected by CVE-2025-25985 and should take immediate action to secure their devices.

What type of attack is possible with CVE-2025-25985?

CVE-2025-25985 allows a physically proximate attacker to execute arbitrary code on the affected device.