CVE-2025-7742 HIGH

CVE-2025-7742: Authentication Bypass in LG Innotek Camera

Vendor Lg Innotek
Product Camera Model LNV5110R
Weakness CWE-288
Published July 24, 2025
Last update July 25, 2025

CVSS base score

8.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.

Key dates

02Disclosure timeline

July 24, 2025 CVE published
July 25, 2025 Record updated