Security readout for executives and security teams
Plain-English summary
This flaw affects AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera firmware V1.00.02. A local attacker with low privileges could gain root-level device access. The bigger business risk is that Wi-Fi and ONVIF credentials are reportedly stored in plaintext, enabling broader network compromise.
Executive priority
Treat this as high priority where the camera is present on trusted or sensitive networks. Local access requirements reduce broad remote urgency, but root compromise and plaintext credential exposure can turn a low-cost camera into a network pivot risk.
Technical view
CVE-2025-50777 is an incorrect access control issue with plaintext credential exposure. CVSS 3.1 is 7.8: local attack vector, low complexity, low privileges, no user interaction, and high confidentiality, integrity, and availability impact. The source bundle names firmware V1.00.02 on the AZIOT camera.
Likely exposure
Exposure is likely limited to organizations or homes using the named AZIOT camera firmware. The CVE metadata has incomplete affected-product fields, so asset confirmation requires checking deployed camera models and firmware versions rather than relying only on CPE matching.
Exploitation context
The source bundle does not show KEV listing or confirmed active exploitation. The stated attack requires local access and low privileges, not remote unauthenticated internet access. Successful compromise could expose network and camera-service credentials stored on the device.
Researcher notes
Evidence is based on the CVE record and referenced public repository. The CVE affected fields list n/a despite the description naming a specific camera and firmware. No patch, vendor advisory, or active exploitation evidence is included in the supplied sources.
Mitigation direction
- Identify and inventory any AZIOT 2MP Full HD Smart Wi-Fi CCTV cameras.
- Check whether deployed devices run firmware V1.00.02.
- Segment affected cameras from sensitive corporate systems.
- Restrict local administrative and physical access to affected devices.
- Rotate Wi-Fi and ONVIF credentials if compromise is suspected.
- Check vendor or maintainer guidance for firmware updates or replacement options.
Validation and detection
- Confirm model and firmware version from approved asset records or device management.
- Verify camera network placement and firewall rules restrict lateral movement.
- Review whether Wi-Fi and ONVIF credentials were reused elsewhere.
- Check device and network logs for unusual local access patterns.
- Track CVE and vendor references for corrected affected-product or patch information.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-284: Authorization and privilege behavior lookup
Authorization weaknesses can support privilege escalation and valid-account review, depending on exploit path. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCWE-312: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2025-50777 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/veereshgadige/aziot-cctv-cve-2025-50777CVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Access Control
Improper Access Control represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.
Cleartext Storage of Sensitive Information
Cleartext Storage of Sensitive Information represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.