CVE-2025-5124: Sony SNC-M1 Administrative Interface default credentials
A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they "have published the 'Hardening Guide' on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5124?
CVE-2025-5124 is classified as a critical severity vulnerability.
What devices are affected by CVE-2025-5124?
CVE-2025-5124 affects Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N, and SNC-RX570N cameras up to version 1.30.
How does CVE-2025-5124 manifest?
CVE-2025-5124 allows for the manipulation of the administrative interface, leading to the use of default credentials.
How do I mitigate CVE-2025-5124?
To mitigate CVE-2025-5124, it is recommended to change default credentials and update the affected devices to the latest firmware version.
What could happen if CVE-2025-5124 is exploited?
If CVE-2025-5124 is exploited, unauthorized users may gain control over administrative functions of the affected devices.