PT-2025-42525 · Apeman · Apeman Id71

Juliourena · Published 2025-10-16 · Updated 2025-10-17 · CVE-2025-11852

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apeman ID71 version 218.53.203.117

Description A security issue exists in the ONVIF Service component of Apeman ID71. Specifically, a manipulation of an unknown function within the /onvif/device service file results in missing authentication. This allows for remote exploitation. The exploit has been publicly released, and the vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

CVE-2025-11852

Affected Products

Apeman Id71

References · 8

• 🔥 https://github.com/juliourena/APEMAN-Camera-PoCs/blob/main/RTSP/RTSP_Unauthenticated.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11852 · Security Note
• https://vuldb.com/?id.328798 · Note
• https://twitter.com/CVEnew/status/1978926543003922843 · Twitter Post
• https://vuldb.com/?ctiid.328798 · Note
• https://t.me/CVEtracker/35138 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1978979710722871470 · Twitter Post
• https://vuldb.com/?submit.668899 · Note