CVE-2025-50777: n/a
The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems.
AI Analysis
Technical Summary
CVE-2025-50777 is an incorrect access control vulnerability in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera, specifically version V1.00.02. The vulnerability enables local attackers with limited privileges to escalate to root shell access. Once root access is obtained, sensitive information including Wi-Fi and ONVIF service credentials stored in plaintext can be extracted. This can facilitate additional network and system compromises. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.
Potential Impact
An attacker with local access can escalate privileges to root, gaining full control of the device. This includes access to sensitive plaintext credentials for Wi-Fi and ONVIF services, which can be used to compromise the local network and other connected systems. The vulnerability affects device confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to the device and monitor for unauthorized physical or network access. Avoid deploying this firmware version in sensitive environments if possible.
CVE-2025-50777: n/a
Description
The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-50777 is an incorrect access control vulnerability in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera, specifically version V1.00.02. The vulnerability enables local attackers with limited privileges to escalate to root shell access. Once root access is obtained, sensitive information including Wi-Fi and ONVIF service credentials stored in plaintext can be extracted. This can facilitate additional network and system compromises. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.
Potential Impact
An attacker with local access can escalate privileges to root, gaining full control of the device. This includes access to sensitive plaintext credentials for Wi-Fi and ONVIF services, which can be used to compromise the local network and other connected systems. The vulnerability affects device confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to the device and monitor for unauthorized physical or network access. Avoid deploying this firmware version in sensitive environments if possible.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- mitre
- Date Reserved
- 2025-06-16T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 688a6c58ad5a09ad00ae17a1
Added to database: 07/30/2025, 19:02:48 UTC
Last enriched: 07/05/2026, 22:07:12 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 166
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.