CVE-2024-11131

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500...

CVE-2024-11131

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500...

CVE-2024-11131

CVE-2024-11131 is a real vulnerability affecting Synology Camera Firmware prior to 1.2.0-0525 (models: BC500, CC400W, TC500). The issue is an out-of-bounds read in the video interface that can allow remote code execution. Affected firmware versions: 1.2.0-0525 and earlier. Reported exploitation d...

PT-2025-11656 · Synology · Synology Camera Firmware

Name of the Vulnerable Software and Affected Versions: Synology Camera Firmware versions prior to 1.2.0-0525 Description: A vulnerability regarding out-of-bounds read is found in the video interface, allowing remote attackers to execute arbitrary code via unspecified vectors. The affected models...

Edimax IC-7100 IP Camera OS Command Injection Vulnerability

Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue...

Synology Camera Firmware Buffer Error Vulnerability

Synology Camera Firmware is a webcam firmware from Synology China. A buffer error vulnerability exists in Synology Camera Firmware versions prior to 1.2.0-0525, which stems from an out-of-bounds read in the video interface, which could lead to the execution of arbitrary code by a remote attacker...

CVE-2024-11131: Out-of-bounds Read

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500...

Unpatched Edimax Camera Flaw Exploited for Mirai Botnet Attacks Since Last Year

An unpatched security flaw impacting the Edimax IC-7100 network camera is being exploited by threat actors to deliver Mirat botnet malware variants since at least May 2024. The vulnerability in question is CVE-2025-1316 CVSS v4 score: 9.3, a critical operating system command injection flaw that a...

CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

February 11, 2025—KB5052006 (OS Build 14393.7785)

None None...

February 11, 2025—KB5051980 (OS Build 25398.1425)

None None...

February 11, 2025—KB5052000 (OS Build 17763.6893) - EXPIRED

None None...

CVE-2025-25680: Improper Control of Generation of Code

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

CVE-2025-25680

The LSC Smart Connect LSC Indoor PTZ Camera version 7.6.32 is susceptible to a Remote Code Execution (RCE) vulnerability within the tuya_ipc_direct_connect function of the anyka_ipc process. An attacker can achieve arbitrary code execution during the Wi-Fi configuration process by presenting a sp...

LSC Smart Connect Indoor IP Camera has a security vulnerability

LSC Smart Connect Indoor IP Camera is an indoor IP camera driver from LSC Smart Connect. A security vulnerability exists in LSC Smart Connect Indoor IP Camera version 7.6.32, which stems from a remote code execution issue in the tuyaipcdirectconnect function...

CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

PT-2025-10786

Name of the Vulnerable Software and Affected Versions: LSC Smart Connect LSC Indoor PTZ Camera version 7.6.32 Description: The issue concerns a remote code execution RCE vulnerability in the tuya ipc direct connect function of the anyka ipc process. This vulnerability allows for arbitrary code...

Smartwares CIP-37210AT C724IP Path Traversal

The vulnerability of the Microprogrammed Software for Smartwares CIP-37210AT and C724IP cameras is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a intruder to gain unauthorized access to protected information...