Is there a public PoC exploit available for CVE-2025-11942?

Yes, a public proof-of-concept exploit is available for CVE-2025-11942. Prioritise patching immediately. EPSS: 0.2%.

X200 Firmware CVE-2025-11942

Q: What is the CVSS score of CVE-2025-11942?

CVE-2025-11942 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

MEDIUM

Improper Authentication (CWE-287)

2025-10-19 cna@vuldb.com

Authentication Bypass X200 Firmware 70Mai

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 18:47 vuln.today

CVE Published

Oct 19, 2025 - 16:15 cve.org

MEDIUM 5.5

DescriptionCVE.org

A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Authentication bypass in 70mai X200 dashcam firmware up to version 20251010 allows remote attackers to pair with the device without any authentication. The flaw resides in the Pairing component and can be exploited without user interaction or privileges. A publicly available exploit exists on GitHub, but the vendor has not responded to disclosure, leaving devices vulnerable with no official patch.