Medium severity6.1NVD Advisory· Published Oct 23, 2025· Updated Jun 17, 2026
CVE-2025-53701
CVE-2025-53701
Description
Vilar VS-IPC1002 IP cameras are vulnerable to Reflected XSS (Cross-site Scripting) attacks, because parameters in GET requests sent to /cgi-bin/action endpoint are not sanitized properly, making it possible to target logged in admin users. The vendor did not respond in any way. Only version 1.1.0.18 was tested, other versions might be vulnerable as well.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:vimicro:vs-ipc1002_firmware:1.1.0.18:*:*:*:*:*:*:*
= 1.1.0.18+ 1 more
- (no CPE)range: = 1.1.0.18
- (no CPE)range: 1.1.0.18
Patches
Vulnerability mechanics
References
1- cert.pl/en/posts/2025/10/CVE-2025-53701nvdThird Party Advisory
News mentions
0No linked articles in our index yet.