CVE-2025-41017 - Multiple vulnerabilities in DFUSION by Davantis

Back Back to CVE browser

MEDIUM

Multiple vulnerabilities in DFUSION by Davantis

Published Nov 24, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.29%

Description

Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.

Affected products

Vendor Davantis Product Dfusion Default
unaffected
- Version
  prior to 6.186.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Davantis

Dfusion

unaffected

Version	Status	Constraints
prior to 6.186.1	affected	-

Remediation

Vendor solution

The vulnerabilities were fixed by the Davantis team in version 6.186.1 in May 2020.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-198649		Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dfusion-davantis