PT-2025-34556 · Unknown · Fnkvision Y215 Cctv Camera

Hypernyan · Published 2025-08-24 · Updated 2025-12-27 · CVE-2025-9383

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FNKvision Y215 CCTV Camera version 10.194.120.40

Description: A security issue has been identified in FNKvision Y215 CCTV Camera. The crypt function within the /etc/passwd file utilizes a weak hash, potentially allowing for local privilege escalation. The attack requires local access and is considered difficult to exploit. The exploit has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

CWE-328

Related Identifiers

CVE-2025-9383

Affected Products

Fnkvision Y215 Cctv Camera

References · 10

• 🔥 https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215/#vulnerability-4-weak-password-hashing-des · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9383 · Security Note
• https://t.me/CVEtracker/30796 · Telegram Post
• https://vuldb.com/?id.321216 · Note
• https://vuldb.com/?ctiid.321216 · Note
• https://twitter.com/VulmonFeeds/status/1959567053842427956 · Twitter Post
• https://t.me/cveNotify/133280 · Telegram Post
• https://vuldb.com/?submit.629813 · Note
• https://twitter.com/CVEnew/status/2005031801442439429 · Twitter Post
• https://vorachat.somsuay.com/blog/Hacking%20CCTV%20FNKvision%20-%20Y215 · Note