Lf9 Pro Firmware CVE-2025-6532

| EUVD-2025-18962 MEDIUM
Incorrect Privilege Assignment (CWE-266)
2025-06-24 [email protected]
Information Disclosure Lf9 Pro Firmware
4.3
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

4
EUVD ID Assigned
Mar 15, 2026 - 22:36 euvd
EUVD-2025-18962
Analysis Generated
Mar 15, 2026 - 22:36 vuln.today
PoC Detected
Oct 01, 2025 - 19:49 vuln.today
Public exploit code
CVE Published
Jun 24, 2025 - 00:15 nvd
MEDIUM 4.3

DescriptionNVD

A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerability is an unknown functionality of the component RTSP Live Video Stream Endpoint. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. This dashcam is distributed by multiple resellers and different names.

AnalysisAI

A security vulnerability in NOYAFA/Xiami LF9 Pro (CVSS 4.3). Risk factors: public PoC available.

Technical ContextAI

Vulnerability type not specified by vendor. Affects NOYAFA/Xiami LF9 Pro.

RemediationAI

Monitor vendor channels for patch availability.

Share

CVE-2025-6532 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy