Security readout for executives and security teams
Plain-English summary
This issue affects Beward N100 H.264 VGA IP Camera firmware M2.1.6.04C014. A malicious webpage could cause a logged-in camera administrator’s browser to perform an administrative action, such as adding an admin account, if the camera does not validate the request properly.
Executive priority
Treat as a targeted remediation item for environments using this older camera model. Prioritize if camera administration is internet-accessible, used in sensitive physical security areas, or managed from general-purpose browsing workstations.
Technical view
CVE-2019-25247 is a CWE-352 cross-site request forgery issue in the Beward N100 camera web administration interface. The public description and Zero Science Lab disclosure describe improper request validation enabling unauthorized administrative actions through a crafted webpage. ExploitDB lists public exploit material, but sources do not show confirmed active exploitation.
Likely exposure
Exposure is most relevant where affected Beward N100 cameras are still running firmware M2.1.6.04C014 and administrators access the web interface from browsers that can reach attacker-controlled pages. Internet-exposed management interfaces increase business risk.
Exploitation context
Successful abuse depends on an administrator being authenticated to the camera interface and being induced to load malicious web content. Public exploit information exists, but the source bundle does not cite CISA KEV listing or confirmed in-the-wild exploitation.
Researcher notes
The CVE metadata lists CVSS 5.3 and CWE-352. The description indicates a social-engineering-dependent CSRF path, while the supplied CVSS vector lists UI:N; validate scoring assumptions against original advisories. No patch version is named in the provided sources.
Mitigation direction
- Identify affected Beward N100 cameras and firmware versions.
- Check Beward guidance for available firmware updates or vendor mitigations.
- Restrict camera administration interfaces to trusted management networks.
- Avoid exposing camera web administration directly to the internet.
- Use separate administrator workstations or browsers for camera management.
Validation and detection
- Inventory Beward N100 H.264 VGA IP Camera assets.
- Confirm whether firmware M2.1.6.04C014 is present.
- Review camera admin accounts for unexpected additions.
- Check whether management interfaces are internet-accessible.
- Assess whether administrative requests have CSRF protections in a controlled test.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-352: User-session and phishing behavior lookup
Client-side and session-facing weaknesses should be reviewed alongside initial-access and user-execution behaviors. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2019-25247 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N3.91.4Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
5.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source materials
- CVE List V5 sourceCVE List V5
- ExploitDB-46318CVE reference · exploit
- Official Product HomepageCVE reference · product
- Zero Science Lab Disclosure (ZSL-2019-5510)CVE reference · third-party-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.