CVE-2025-55810
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-13

Last updated on: 2025-11-14

Assigner: MITRE

Description
A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-13
Last Modified
2025-11-14
Generated
2026-06-16
AI Q&A
2025-11-13
EPSS Evaluated
2026-06-15
NVD
CVE-2025-55810
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
alaga home_security_wifi_camera 1.4.2
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2. It allows a physical attacker to execute commands as the root user by placing a script file with a specific name on an SD card inserted into the device.

Impact Analysis

An attacker with physical access to the device can gain root-level control by executing arbitrary commands via a specially named script on an SD card. This could lead to unauthorized control over the device, potential data compromise, or disruption of device functionality.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-55810. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart