CVE-2025-53702

Vilar VS-IPC1002 IP cameras are vulnerable to DoS (Denial-of-Service) attacks. An unauthenticated attacker on the same local network might send a crafted request to /cgi-bin/action endpoint and render the device completely unresponsive. A manual restart of the device is required.  The vendor did not respond in any way. Only version 1.1.0.18 was tested, other versions might be vulnerable as well.

• CWE-755

• https://cert.pl/en/posts/2025/10/CVE-2025-53701Third Party Advisory

Published

Oct 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53693Use of Externally-Controlled Input to Select Classes or Code…9.8
• CVE-2025-53694Exposure of Sensitive Information to an Unauthorized Actor v…7.5
• CVE-2025-53695OS Command Injection in iSTAR Ultra products web application…9.4
• CVE-2025-53696iSTAR Ultra performs a firmware verification on boot, howeve…9.3
• CVE-2025-5370A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2025-53701Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS …6.1
• CVE-2025-53703DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data w…8.7
• CVE-2025-53704The password reset mechanism for the Pivot client applicatio…8.7
• CVE-2025-53705In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt S…8.4
• CVE-2025-53706Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-53707A reflected cross-site scripting (xss) vulnerability exists …6.1
• CVE-2025-53709Secure-upload is a data submission service that validates si…5.4