CVE-2025-53702
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Vilar VS-IPC1002 IP cameras are vulnerable to DoS (Denial-of-Service) attacks. An unauthenticated attacker on the same local network might send a crafted request to /cgi-bin/action endpoint and render the device completely unresponsive.
Risk Assessment
An attacker can remotely render IP cameras unresponsive, leading to monitoring disruption and requiring manual restart of the device, potentially exposing the organization to physical security gaps.
Recommendation
Implement mitigations such as restricting access to the /cgi-bin/action endpoint from untrusted networks, or contact the vendor for a fix, as they did not respond to the report.
Other vulnerabilities in Vilar VS-IPC1002
Original NVD description (English source)
Vilar VS-IPC1002 IP cameras are vulnerable to DoS (Denial-of-Service) attacks. An unauthenticated attacker on the same local network might send a crafted request to /cgi-bin/action endpoint and render the device completely unresponsive. A manual restart of the device is required. The vendor did not respond in any way. Only version 1.1.0.18 was tested, other versions might be vulnerable as well.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS