CVE-2025-62674

MediumCVSS 6.8/10Last modified Oct 18, 2026

Description

The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an attacker unauthorized access to camera configuration information.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-306

Affected software

VendorProductVersions
iCam365P201<= 43.4.0.0
iCam365QC021<= 43.4.0.0

References

Timeline

Published
Nov 20, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-626754.3An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FCVE-2025-626767.1An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 CVE-2025-62684.3A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function of the file /luna/seCVE-2025-626866.2A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance InstallatiCVE-2025-626876.9Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations maCVE-2025-626887.1An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. TheCVE-2025-626898.7NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the CVE-2025-62695.3A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cacheCVE-2025-626906.1Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to aCVE-2025-626919.3Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. ReceivinCVE-2025-626936.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediawCVE-2025-626946.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediaw
CVE-2025-62674: Medium severity, CVSS 6.8 | Vulnix