Which versions of 70mai M300 are affected by CVE-2025-6528?

Organizations using 70mai M300 should be aware of moderate risk from CVE-2025-6528, a improper authentication vulnerability rated CVSS 4.3.

Is there a public PoC exploit available for CVE-2025-6528?

Yes, a public proof-of-concept exploit is available for CVE-2025-6528. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-6528?

Within 30 days: Identify affected systems running 70mai M300 and apply vendor patches as part of regular patch cycle. Audit authentication configurations.

70mai M300 CVE-2025-6528

Q: What is the CVSS score of CVE-2025-6528?

CVE-2025-6528 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-18960 LOW

Improper Authentication (CWE-287)

2025-06-23 cna@vuldb.com

Authentication Bypass M300 Firmware 70Mai

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.3 MEDIUM

AV:A due to local network requirement; PR:N; impact only low confidentiality.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.3 (MEDIUM) 2.1 (LOW)

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18960

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

PoC Detected

Nov 14, 2025 - 14:33 vuln.today

Public exploit code

CVE Published

Jun 23, 2025 - 23:15 nvd

MEDIUM 4.3

CVE Published

Jun 23, 2025 - 23:15 cve.org

LOW 2.1

DescriptionCVE.org

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /livestream/12 of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper authentication. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Improper authentication in 70mai M300 dashcam firmware up to 20250611 allows local network attackers to access the RTSP live video stream without credentials. A public exploit exists, but no active exploitation has been confirmed and EPSS risk is low.

Technical ContextAI

The vulnerability affects the RTSP (Real-Time Streaming Protocol) live video stream endpoint at /livestream/12 on 70mai M300 dashcams. RTSP is a network control protocol used for streaming media. The CWE-287 (Improper Authentication) indicates the endpoint fails to verify the identity of the requester, allowing unauthorized access. The CPE cpe:2.3:o:70mai:m300_firmware:*:*:*:*:*:*:*:* confirms the affected product is the firmware of the M300 dashcam.

RemediationAI

No vendor-released patch identified at time of analysis. As a workaround, restrict network access to the dashcam's RTSP port (typically 554) to trusted devices only, e.g., by using a firewall or VLAN segmentation. Note that this may block legitimate remote viewing. Alternatively, disable the RTSP streaming feature if not needed. Monitor for future firmware updates from 70mai.