CVE-2025-28231

9.1 criticalEPSS 0.4%

Critical (9.1). EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28231
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28231

Check your stack JSON