CNNVD-202506-3000 Information

CNNVD ID

CNNVD-202506-3000

CVE-2025-6528

  • CNNVD Published: 2025-06-23

Description (Chinese)

70mai M300是中国70迈(70mai)公司的一款智能记录仪。 70mai M300 20250611及之前版本存在授权问题漏洞,该漏洞源于对文件/livestream/12的错误操作导致身份验证不当。

Description (English)

70mai M300 is a smart recorder for a 70mai company in China. There is a mandate gap in the 70mai M300 20250611 and earlier versions, which stems from the incorrect handling of document/livestream/12 resulting in improper identification.

Hazard Level

High

Vulnerability Type

授权问题

Affected Vendor

70迈

Published

2025-06-23

Last Modified

2026-02-24

References

https://github.com/geo-chen/70mai/blob/main/README.md#finding-6-unauthenticated-live-video-stream https://vuldb.com/?submit.595449 https://vuldb.com/?id.313645 https://vuldb.com/?ctiid.313645 https://access.redhat.com/security/cve/cve-2025-6528

Share on: