HIGH

CVE-2025-70962

2026-08-05 CVSS v3.1

CVSS

7.5

Description

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.

Weakness (CWE)

CWE-284 Improper Access Control

EPSS Score

0.38%

Probability of exploitation in next 30 days

32.1th percentile

References

https://github.com/namaek2/CVE-2025-70962 https://www.zositech.com/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE