Overview
The vulnerability identified as CVE-2025-9380 is a serious security flaw affecting FNKvision Y215 CCTV cameras. This vulnerability has an impact on the functionality of the file /etc/passwd of the component firmware, leading to the exposure of hard-coded credentials. With local access, attackers can exploit this vulnerability, potentially leading to system compromise or data leakage.
Vulnerability Summary
CVE ID: CVE-2025-9380
Severity: High – CVSS 7.8
Attack Vector: Local
Privileges Required: Low
User Interaction: None
Impact: Potential system compromise and data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
FNKvision Y215 CCTV Camera | 10.194.120.40
How the Exploit Works
The vulnerability stems from the hard-coded credentials in the /etc/passwd file of the camera’s firmware. As such, an attacker with local access can exploit these credentials to gain unauthorized access to the system. The attacker can manipulate or extract data, compromise the system, or conduct other malicious activities.
Conceptual Example Code
Given the nature of the vulnerability, a potential exploit may involve a shell command that accesses the /etc/passwd file. Note that this is a conceptual example and might not work verbatim.
# Obtain local access
ssh user@10.194.120.40
# Navigate to /etc/passwd
cd /etc/passwd
# Exploit hard-coded credentials
cat /etc/passwdMitigation
The optimal solution is to apply a patch from the vendor. However, the vendor has not yet responded to this disclosure. In the meantime, using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can serve as temporary mitigation. These systems can help detect and prevent unauthorized access, thereby reducing the risk of a successful exploit. Additionally, it’s recommended to change all default passwords and regularly update them to further secure the system.