PT-2025-34554 · Fnkvision · Fnkvision Y215 Cctv Camera

Hypernyan · Published 2025-08-24 · Updated 2025-08-24 · CVE-2025-9381

Positive Technologies (AI Summary)

CVSS v3.1

1.6

Low

Base vector

AV:P/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40

Description: A security flaw exists in FNKvision Y215 CCTV Camera version 10.194.120.40. The issue involves information disclosure through manipulation of an unknown part of the file /tmp/wpa supplicant.conf. The attack requires physical access to the device and is considered difficult to exploit. The exploit has been publicly released. The vendor was contacted regarding this disclosure but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2025-9381

Affected Products

Fnkvision Y215 Cctv Camera

References · 10

• 🔥 https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-2-ssid-and-wi-fi-password-stored-in-plaintext · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9381 · Security Note
• https://vuldb.com/?id.321214 · Note
• https://twitter.com/CVEnew/status/1959520983800222021 · Twitter Post
• https://vuldb.com/?ctiid.321214 · Note
• https://vuldb.com/?submit.629811 · Note
• https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 · Note
• https://t.me/cveNotify/133278 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1959538874629214263 · Twitter Post
• https://t.me/CVEtracker/30794 · Telegram Post