PT-2026-28304 · Unknown · Lsc Indoor Camera

CVE-2025-69986 · Publicado 2026-03-27 · Atualizado 2026-03-27

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LSC Indoor Camera version 7.6.32

Description A buffer overflow issue exists in the ONVIF GetStreamUri function. The application does not properly check the length of the Protocol parameter within the Transport element. An attacker can exploit this by sending a crafted SOAP request with an oversized protocol string, leading to a stack buffer overflow and overwriting the return instruction pointer (RIP). This can result in a Denial of Service (DoS) through device crashes or potentially allow for Remote Code Execution (RCE) within the ONVIF service context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Stack Overflow

Enumeração de Fraquezas

CWE-20

CWE-121

Identificadores relacionados

CVE-2025-69986

Produtos afetados

Lsc Indoor Camera

Referências · 3

• 🔥 https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2025-69986.md · Exploit
• https://twitter.com/vuldb/status/2037542717341978688 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-69986 · Nota de Segurança