CVE-2025-67159

CVE-2025-67159 affects Vatilon IP camera firmware v1.12.37-20240124. The root issue is plaintext transmission of credentials via the /cgi-bin/web.cgi API, with the web interface processing username/password in plaintext without proper authentication/session validation. This enables unauthenticate...

CVE-2025-67160

CVE-2025-67160 affects Vatilon v1.12.37-20240124. The issue is a directory traversal vulnerability that allows an unauthenticated attacker (network access, low complexity) to access sensitive directories and files, with a high confidentiality impact and no data integrity or availability impact re...