CVE-2025-11942

Medium CVSS: 6.9

A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vendor

70mai

Product

X200 Firmware

CWE

CWE-287

Yayın Tarihi

2025-10-19 16:15:36

Güncelleme

2025-11-17 12:45:11

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-287 X200 Firmware MEDIUM 70mai 2025

Referanslar

https://github.com/geo-chen/70mai/blob/main/README.md#finding-9-bypass-device-pairing-of-70mai-dashcam-omni-x200 https://vuldb.com/?ctiid.329021 https://vuldb.com/?id.329021 https://vuldb.com/?submit.672520

Benzer Kayıtlar

High

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init…

Medium

CVE-2025-11943

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality…

Medium

CVE-2025-6530

A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown p…

Medium

CVE-2025-6528

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerabilit…

High

CVE-2025-6529

A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknow…

Low

CVE-2025-6527

A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown fun…