BaseFortify

Publication date: 2025-09-30

Last updated on: 2025-10-02

Assigner: MITRE

Description

The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-09-30

Last Modified

2025-10-02

Generated

2026-07-06

AI Q&A

2025-09-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-56675

EUVD

EUVD-2025-31760

Affected Vendors & Products

Vendor	Product	Version / Range
topvision	eken_t6	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-669	The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

Attack-Flow Graph

Executive Summary

This vulnerability involves the EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sending debug logs to EKEN cloud servers that contain sensitive information such as the Wi-Fi SSID and password.

Impact Analysis

The vulnerability can expose sensitive Wi-Fi credentials to EKEN cloud servers, potentially allowing unauthorized access to your Wi-Fi network and compromising network security.

Hi! I’m here to help you understand CVE-2025-56675. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70