cve.bz

CVE-2025-7742

8.3 highEPSS 0.7%

High (8.3). EPSS 0.7% chance of exploitation in the next 30 days.

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.

Severity

CVSS 4.0

8.3 high
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE
CWE-288
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON