BaseFortify

Publication date: 2025-11-13

Last updated on: 2025-11-14

Assigner: MITRE

Description

A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-13

Last Modified

2025-11-14

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-55810

Affected Vendors & Products

Vendor	Product	Version / Range
alaga	home_security_wifi_camera	1.4.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2. It allows a physical attacker to execute commands as the root user by placing a script file with a specific name on an SD card inserted into the device.

Impact Analysis

An attacker with physical access to the device can gain root-level control by executing arbitrary commands via a specially named script on an SD card. This could lead to unauthorized control over the device, potential data compromise, or disruption of device functionality.

Hi! I’m here to help you understand CVE-2025-55810. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70