VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 18, 2025· Updated Apr 18, 2025

CVE-2025-25984

CVE-2025-25984

Description

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

Root cause

"Hardcoded root password stored in the read-only filesystem allows UART shell access."

Attack vector

An attacker with physical access must disassemble the camera and solder wires to test pads near the CPU to access the UART interface [ref_id=1]. After connecting a UART adapter (GND, TX, RX), pressing Enter presents a login prompt where the attacker enters `root` as the username and `gzhongshi` as the password [ref_id=1]. This grants a root shell, giving full control over the device [CWE-259][ref_id=1].

Affected code

The vulnerability resides in the root password hash stored in `/etc/shadow` on the squashfs (read-only) partition of the flash chip [ref_id=1]. The UART interface is exposed via test pads near the CPU, and the root password is hardcoded as `gzhongshi` [ref_id=1].

What the fix does

No patch or firmware update has been published by Macro-video Technologies Co.,Ltd to address this issue [ref_id=1]. The advisory recommends that users replace the device or restrict physical access, as the hardcoded password is stored in a read-only filesystem and cannot be changed without modifying the firmware image [ref_id=1].

Preconditions

  • physicalAttacker must have physical possession of the camera and disassemble it to access test pads near the CPU
  • inputAttacker must connect a UART adapter to the exposed test pads (GND, TX, RX)
  • authNo authentication is required before the login prompt; the hardcoded password is the only gate

Reproduction

1. Disassemble the camera to expose the circuit board. 2. Solder wires to the UART test pads near the CPU: device GND (USB-C shielding) to UART adapter GND, device TX (behind the resistor) to UART adapter RX, device RX (close to the edge) to UART adapter TX [ref_id=1]. 3. Connect the UART adapter to a computer and open a serial terminal. 4. Press Enter to get the login prompt. 5. Log in with username `root` and password `gzhongshi` [ref_id=1]. 6. Run `id` or `whoami` to verify root shell access [ref_id=1].

Generated on May 26, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

1

News mentions

0

No linked articles in our index yet.