CVE-2025-63296 - KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root

Back Back to CVE browser

MEDIUM

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root

Published Nov 10, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-50774
Advisory
https://gist.github.com/t4e-3/082cdd0b7ee6b650c7aaae97fd4e016c
ExploitThird Party Advisory
https://github.com/t4e-3/CVE-2025-63296
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-50774		Advisory
https://gist.github.com/t4e-3/082cdd0b7ee6b650c7aaae97fd4e016c		ExploitThird Party Advisory
https://github.com/t4e-3/CVE-2025-63296		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 10, 2025

Updated Nov 12, 2025

Reserved Oct 27, 2025

Link CVE-2025-63296

CISA Vulnrichment

Updated Nov 12, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-63296

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 10, 2025

Updated Nov 12, 2025

Link EUVD-2025-50774

GitHub

No data