Vulnerability · Published Jul 24, 2025 · Assigned by LGE
CVE-2025-7742Authentication Bypass in LG Innotek Camera
High 8.3
In plain English
A high-severity authentication bypass in Camera Model LNV5110R from LG Innotek. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Official description
An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| LG Innotek | Camera Model LNV5110R | All |
Weakness: CWE-288 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N