PT-2025-47630 · Unknown · Net Devices

Published 2025-11-20 · Updated 2025-11-21 · CVE-2025-64770

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Net devices (affected versions not specified)

Description The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services. This may allow an attacker unauthorized access to camera configuration information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-64770

Affected Products

Net Devices

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-64770 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-02.json · Note
• https://icam365.net/en/aboutUs · Note
• https://t.me/CVEtracker/37871 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-324-02 · Note
• https://twitter.com/VulmonFeeds/status/1991632369304965301 · Twitter Post
• https://twitter.com/CVEnew/status/1991608106363584727 · Twitter Post