CVE-2019-25246

🗓️ 24 Dec 2025 19:28:00Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

CVE-2019-25246: Beward N100 IP Camera allows authenticated file disclosure via READ.filePath.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2019-25246	24 Dec 202520:27	–	circl
CNNVD	Beward N100 security vulnerabilities	24 Dec 202500:00	–	cnnvd
Cvelist	CVE-2019-25246 Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure	24 Dec 202519:28	–	cvelist
EUVD	EUVD-2025-205317	24 Dec 202521:30	–	euvd
KittySploit	BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure Detection	28 Jul 202611:27	–	kittysploit
Nuclei	BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure	1 Nov 202602:03	–	nuclei
NVD	CVE-2019-25246	24 Dec 202520:15	–	nvd
Positive Technologies	PT-2025-53332	24 Dec 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-25246: Improper Limitation of a Pathname to a Restricted Directory	24 Dec 202500:00	–	rapid7
Vulnrichment	CVE-2019-25246 Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure	24 Dec 202519:28	–	vulnrichment

[
  {
    "vendor": "Beward R&D Co., Ltd",
    "product": "N100 H.264 VGA IP Camera",
    "versions": [
      {
        "version": "M2.1.6.04C014",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46320
beward	www.beward.net/
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5511.php

Parameter	Position	Path	Description	CWE
READ.filePath	query param	/cgi-bin/operator/fileread	Authenticated file disclosure vulnerability in the fileread script where the 'READ.filePath' parameter is not properly validated, allowing the disclosure of arbitrary system files.	CWE-22

17 Jun 2026 02:31Current

5.9Medium risk

Vulners AI Score5.9

CVSS 47.1

CVSS 3.18.8

EPSS0.18756

SSVC

CWE-22