BaseFortify

Publication date: 2025-11-20

Last updated on: 2025-11-21

Assigner: ICS-CERT

Description

The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may allow an attacker unauthorized access to camera configuration information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-20

Last Modified

2025-11-21

Generated

2026-07-06

AI Q&A

2025-11-20

EPSS Evaluated

2026-07-05

NVD

CVE-2025-64770

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability allows unauthenticated access to Open Network Video Interface Forum (ONVIF) services on affected products. This means an attacker can access camera configuration information without needing to log in or authenticate, potentially gaining unauthorized control or insight into the device settings.

Impact Analysis

The vulnerability can impact you by allowing attackers to gain unauthorized access to camera configuration information. This could lead to privacy breaches, unauthorized surveillance, or manipulation of camera settings, potentially compromising security and safety.

Hi! I’m here to help you understand CVE-2025-64770. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70