CVE-2025-63296

CVE-2025-63296 요약 KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera 펌웨어 v33.53.87 은 부팅/업데이트 로직에 코드 실행 취약점 을 포함하고 있습니다. 시작 중에 /usr/sbin/anykaservice.sh가 마운트된 TF/SD 카드를 검사하고, /mnt/update.nor.sh가 존재하면 /tmp/net.sh로 복사하여 root로 실행하므로, 물리적 접근이 있는 공격자가 임의 명령을 실행할 수 있습니다. 세부 정보 취약 엔드포인트 :...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

EUVD-2025-50774

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

PT-2025-46197

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

CVE-2025-63296

CVE-2025-63296 affects the KERUI K259 5MP Wi‑Fi / Tuya Smart Security Camera (firmware v33.53.87). The issue is a code execution vulnerability in the bootstrap/update path: during startup, /usr/sbin/anyka_service.sh scans mounted TF/SD cards; if /mnt/update.nor.sh is found, it copies it to /tmp/n...

KERUI K259 5MP Wi-Fi / Tuya Smart 安全漏洞

KERUI K259 5MP Wi-Fi / Tuya Smart is a webcam from KERUI. A security vulnerability exists in KERUI K259 5MP Wi-Fi / Tuya Smart that originates from scanning the mounted TF/SD card at startup and executing a specific script, which could lead to code execution...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...