PT-2025-27523 · Unknown · Safecam X300

Geochen · Published 2025-03-24 · Updated 2025-07-01 · CVE-2025-6951

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SAFECAM X300 up to 20250611

Description: A problematic issue was found in the FTP Service component, allowing the use of default credentials. This issue requires access to the local network to be exploited. The exploit has been publicly disclosed.

Recommendations: For SAFECAM X300 up to 20250611, consider changing the default credentials of the FTP Service component to prevent exploitation. As a temporary workaround, restrict access to the local network to minimize the risk of exploitation. Avoid using default credentials in the FTP Service until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2025-08035

CVE-2025-6951

Affected Products

Safecam X300

References · 9

• 🔥 https://github.com/geo-chen/SAFECAM · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6951 · Security Note
• https://bdu.fstec.ru/vul/2025-08035 · Security Note
• https://t.me/cvetracker/27506 · Telegram Post
• https://safecam.my/pages/x300 · Note
• https://vuldb.com/?ctiid.314488 · Note
• https://vuldb.com/?submit.595454 · Note
• https://vuldb.com/?id.314488 · Note
• https://twitter.com/CVEnew/status/1940013164612985117 · Twitter Post