V380 Ip Camera / Appfhe1 V1.0.6.0
Approved changes feed: RSS · Atom
cpe:2.3:a:shenzhen_liandian_communication_technology_ltd:v380_ip_camera_/_appfhe1_v1.0.6.0:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Shenzhen Liandian Communication Technology Ltd (024066e1-876a-5ee4-9a97-fc298af47524) |
|---|---|
| Product | V380 Ip Camera / Appfhe1 V1.0.6.0 (890a79b2-d335-50ac-acc8-aa135d917c6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12527 |
vulnerable | 2026-07-29 00:23:32.403603 |
Details available
A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.
Published: 2026-06-18T13:55:41.175Z
Updated: 2026-06-18T14:54:30.902Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7503 |
vulnerable | 2026-06-08 07:45:17.559861 |
Details available
An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, default credentials. The Telnet service is enabled by default and is not disclosed or configurable via the device’s web interface or user manual. An attacker with network access can authenticate using default credentials and gain root-level shell access to the device. The affected firmware version is AppFHE1_V1.0.6.0 (Kernel: KerFHE1_PTZ_WIFI_V3.1.1, Hardware: HwFHE1_WF6_PTZ_WIFI_20201218). No official fix or firmware update is available, and the vendor could not be contacted. This vulnerability allows for remote code execution and privilege escalation.
Published: 2025-07-11T18:53:24.618Z
Updated: 2025-07-11T19:17:15.281Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.