CVE-2025-50777
High
Description
The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems.
SeverityHigh
CVSS7.8
Exploit probability—
ProductAziot 2mp Full Hd Smart Wi-fi Cctv Home Security Camera Firmware
PublishedJul 30, 2025
First seenJul 30, 2025
Weakness typeCWE-284Improper access controlCWE-312CWE-312
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aziot 2mp_full_hd_smart_wi-fi_cctv_home_security_camera_firmware | 1.00.02 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.