Overview
The vulnerability identified as CVE-2025-9380 is a serious security flaw affecting FNKvision Y215 CCTV cameras. This vulnerability has an impact on the functionality of the file /etc/passwd of the component firmware, leading to the exposure of hard-coded credentials. With local access, attackers can exploit this vulnerability, potentially leading to system compromise or data leakage.
Vulnerability Summary
CVE ID: CVE-2025-9380
Severity: High – CVSS 7.8
Attack Vector: Local
Privileges Required: Low
User Interaction: None
Impact: Potential system compromise and data leakage
Affected Products
Share secrets securely
Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.
Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.
- • Encrypted identity
- • Private Spaces for organizations and teams
- • End-to-end encrypted chat, calls, files, and notes
- • Sensitive AI work and protected collaboration
- • Built for information that cannot leak
Our mission is to secure human work alongside AI.
Product | Affected Versions
FNKvision Y215 CCTV Camera | 10.194.120.40
How the Exploit Works
The vulnerability stems from the hard-coded credentials in the /etc/passwd file of the camera’s firmware. As such, an attacker with local access can exploit these credentials to gain unauthorized access to the system. The attacker can manipulate or extract data, compromise the system, or conduct other malicious activities.
Conceptual Example Code
Given the nature of the vulnerability, a potential exploit may involve a shell command that accesses the /etc/passwd file. Note that this is a conceptual example and might not work verbatim.
# Obtain local access
ssh user@10.194.120.40
# Navigate to /etc/passwd
cd /etc/passwd
# Exploit hard-coded credentials
cat /etc/passwdMitigation
The optimal solution is to apply a patch from the vendor. However, the vendor has not yet responded to this disclosure. In the meantime, using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can serve as temporary mitigation. These systems can help detect and prevent unauthorized access, thereby reducing the risk of a successful exploit. Additionally, it’s recommended to change all default passwords and regularly update them to further secure the system.