CVE-2025-7742
An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.
- Score
- CVSS 4.0 8.3 High
- Status
- Deferred - product.security@lge.com
- Published
- 2025-07-25
- Last modified
- 2025-07-25
- Weaknesses
- CWE-288
Affected products
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-04
