CVE-2025-63667

Multiple Vatilon IP camera brands, specifically SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, and ASECAM v1.14.10-20240725, are vulnerable to an incorrect access control flaw. The devices fail to properly validate credentials before issuing Session-Id tokens, particularly at the /cgi-bin/w...