CVE-2018-25130 MEDIUM

CVE-2018-25130: Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database

Vendor Beward R&D Co., Ltd
Product BEWARD Intercom
Weakness CWE-256
Published December 24, 2025
Last update December 24, 2025
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized access to IP cameras and door stations.

Key dates

02Disclosure timeline

December 24, 2025 CVE published
December 24, 2025 Record updated