BaseFortify

Publication date: 2025-10-16

Last updated on: 2025-10-21

Assigner: VulDB

Description

A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-16

Last Modified

2025-10-21

Generated

2026-07-06

AI Q&A

2025-10-16

EPSS Evaluated

2026-07-05

NVD

CVE-2025-11852

EUVD

EUVD-2025-34825

Affected Vendors & Products

Vendor	Product	Version / Range
apeman	id71	218.53.203.117
apeman	onvif_service	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Apeman ID71 device, specifically in an unknown function within the /onvif/device_service file of the ONVIF Service component. It allows an attacker to bypass authentication remotely by manipulating this function, potentially gaining unauthorized access.

Impact Analysis

The vulnerability can impact you by allowing remote attackers to bypass authentication on the affected device, potentially leading to unauthorized access to device functions or data. This could compromise the security and privacy of the device and its connected systems.

Hi! I’m here to help you understand CVE-2025-11852. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70