ZDI-CAN-26851
HIGH 7.5
Overdue
May 06, 2025
Lorex
Lorex is a well-known manufacturer of surveillance and security camera systems. This high-severity vulnerability requires adjacent network access and high attack complexity, but requires no authentication and can result in complete compromise of confidentiality, integrity, and availability on the affected system. Security teams should monitor for patches from Lorex by the September 2025 deadline and assess whether their surveillance infrastructure is accessible from untrusted network segments.
Advisory Details
Researcher
Discovered by:
PHP Hooligans / Midnight Blue
Reported
May 06, 2025
Deadline
September 03, 2025
225d overdue
CVSS Vector
AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H