PT-2025-34555 · Unknown · Fnkvision Y215 Cctv Camera

Hypernyan · Published 2025-08-24 · Updated 2025-08-24 · CVE-2025-9382

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40

Description: A weakness has been identified in the FNKvision Y215 CCTV Camera. This vulnerability affects unknown code within the s1 rf test config file of the Telnet Service component, potentially leading to a backdoor. The physical device is targetable for this attack, which is characterized by high complexity and difficult exploitability. The exploit has been made publicly available and may be exploited. The vendor was contacted regarding this disclosure but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2025-9382

Affected Products

Fnkvision Y215 Cctv Camera

References · 10

• 🔥 https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-3-sd-card-factory-backdoor · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9382 · Security Note
• https://twitter.com/VulmonFeeds/status/1959536314644050096 · Twitter Post
• https://vuldb.com/?ctiid.321215 · Note
• https://t.me/cveNotify/133279 · Telegram Post
• https://vuldb.com/?submit.629812 · Note
• https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 · Note
• https://twitter.com/CVEnew/status/1959536985338482771 · Twitter Post
• https://vuldb.com/?id.321215 · Note
• https://t.me/CVEtracker/30795 · Telegram Post