What is the CVSS score of CVE-2025-65396?

CVE-2025-65396 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Dome Flare Firmware are affected by CVE-2025-65396?

Organizations using the boot process of Blurams Flare Camera should be aware of moderate risk from CVE-2025-65396, a buffer overflow vulnerability rated CVSS 6.1.

How to fix or mitigate CVE-2025-65396?

Within 30 days: Identify affected systems running the boot process of Blurams Flare Camera and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Dome Flare Firmware CVE-2025-65396

MEDIUM

Buffer Overflow (CWE-119)

2026-01-14 cve@mitre.org

Buffer Overflow Dome Flare Firmware

6.1

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

6.1 MEDIUM

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 14, 2026 - 17:16 nvd

MEDIUM 6.1

DescriptionCVE.org

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the boot, by shorting a data pin of the IC to ground. An attacker can then dump the entire firmware, leading to the disclosure of sensitive information including cryptographic keys and user configurations.

AnalysisAI

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects the a bootloader shell via the UART component of Dome Flare Firmware. A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the boot, by shorting a data pin of the IC to ground. An attacker can then dump the entire firmware, leading to the disclosure of sensitive information including cryptographic keys and user configurations.