CVE-2025-8613: (0Day) Vacron Camera ping Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8613?
CVE-2025-8613 is considered a high severity vulnerability because it allows remote attackers to execute arbitrary code on Vacron Camera devices.
How do I fix CVE-2025-8613?
To fix CVE-2025-8613, ensure that you update your Vacron Camera devices with the latest firmware that addresses this vulnerability.
Who is affected by CVE-2025-8613?
CVE-2025-8613 affects installations of Vacron Camera devices that have not implemented the necessary security measures.
Can CVE-2025-8613 be exploited without authentication?
No, CVE-2025-8613 requires authentication to exploit, meaning that an attacker must gain access to the device's credentials.
What specific component is vulnerable in CVE-2025-8613?
The specific vulnerable component in CVE-2025-8613 is the webs.cgi endpoint within Vacron Camera devices.