ZDI-CAN-26851 HIGH 7.5 Overdue May 06, 2025

Lorex

Lorex is a well-known manufacturer of surveillance and security camera systems. This high-severity vulnerability requires adjacent network access and high attack complexity, but requires no authentication and can result in complete compromise of confidentiality, integrity, and availability on the affected system. Security teams should monitor for patches from Lorex by the September 2025 deadline and assess whether their surveillance infrastructure is accessible from untrusted network segments.

Advisory Details
Researcher Discovered by: PHP Hooligans / Midnight Blue
Reported May 06, 2025
Deadline September 03, 2025 225d overdue
CVSS Vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy