FNKvision Y215 CCTV Camera wpa_supplicant.conf information disclosure
Published Aug 24, 2025
1.0
LOWCVSS 4.0
EPSS 0.14%
Description
A security flaw has been discovered in FNKvision Y215 CCTV Camera 10.194.120.40. This affects an unknown part of the file /tmp/wpa_supplicant.conf. Performing manipulation results in information disclosure. The attack may be carried out on the physical device. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
- Version 10.194.120.40StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| FNKvision | Y215 CCTV Camera | n/a |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25640 Advisory
- https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 related
- https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-2-ssid-and-wi-fi-password-stored-in-plaintext exploit
- https://vuldb.com/?ctiid.321214 signaturepermissions-required
- https://vuldb.com/?id.321214 vdb-entry
- https://vuldb.com/?submit.629811 third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25640 | Advisory | |
| https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 | related | |
| https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-2-ssid-and-wi-fi-password-stored-in-plaintext | exploit | |
| https://vuldb.com/?ctiid.321214 | signaturepermissions-required | |
| https://vuldb.com/?id.321214 | vdb-entry | |
| https://vuldb.com/?submit.629811 | third-party-advisory |
Change history (0)
No recorded changes yet.