EUVD-2025-209098Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control. An unauthenticated attacker in physical proximity can associate with this open network. Once connected, the attacker gains access to the camera's private network interface and can retrieve sensitive information, including the live video and audio stream, without providing credentials.
AnalysisAI
BS Producten Petcam version 33.1.0.0818 fails to enforce access controls on its wireless network interface, allowing unauthenticated attackers within physical proximity to connect to the device's open network and directly access live video and audio streams without authentication. The vulnerability affects a consumer IP camera product and carries a CVSS score of 6.5 (medium severity) driven by high confidentiality impact despite requiring physical proximity. A proof-of-concept and technical analysis are publicly available via GitHub, though no confirmation of active exploitation in the wild has been identified.
Technical ContextAI
The vulnerability is rooted in incorrect access control mechanisms (CWE classification not specified in available data) on the device's wireless network interface. BS Producten Petcam devices operate as networked cameras that expose a private network interface for streaming video and audio; the affected version 33.1.0.0818 implements an open wireless network without WPA2/WPA3 encryption or credential enforcement at the network layer. Once an unauthenticated attacker associates with the open SSID broadcast by the camera, the device permits direct access to streaming endpoints without requiring authentication, treating network-layer association as implicit authorization. This design pattern reflects a failure to implement defense-in-depth principles typical in consumer IoT devices where network segmentation and application-level access controls are often omitted.
RemediationAI
Remediation requires obtaining and deploying a patched firmware version from BS Producten; however, no specific patched version number or vendor advisory URL is provided in the available data. Users should immediately consult the BS Producten support portal or the referenced GitHub security research repository for patch availability and firmware update procedures. Until a vendor patch is available and deployed, implement network segmentation by isolating the camera to a separate VLAN or guest network with no access to sensitive systems or data, disable wireless connectivity if not required and use only wired Ethernet, or restrict physical access to the camera's operating environment to authorized personnel only. If the device is deployed in a multi-user or public-facing environment, consider temporarily removing it from service until a vendor-confirmed patch can be applied. Users should also review any stored or cached video footage for unauthorized access and change any associated account credentials if the camera integrates with a cloud service.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today