Vulnerability · Published Nov 6, 2025 · Assigned by icscert
CVE-2025-12636Ubia Ubox
Medium 6.5
In plain English
A medium-severity security flaw in Ubox Android from Ubia. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 81.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ubia | Ubox Android | 0 – before January 15, 2026 |
| Ubia | Ubox IOS | 0 – before January 15, 2026 |
Weakness: CWE-522 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N