CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 is vulnerable to code execution due to a flaw in its boot/update logic. During startup, the script /usr/sbin/anyka_service.sh scans mounted TF/SD cards for a file named /mnt/update.nor.sh . If found, the system copies this file ...