{"id":"CVE-2025-55810","aliases":["EUVD-2025-175370","GHSA-qpx6-p48h-5cr8"],"status":"published","title":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware...","description":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00247,"percentile":0.16104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2025-11-13T00:00:00Z","modified":"2026-11-05T14:10:00Z","products":[{"vendor":"alagaai","product":"s-cw2503c-h_firmware"}],"references":[{"url":"https://www.alagaai.com/","tags":["Product"]},{"url":"https://www.mgm-sp.com/privilege-escalation-vulnerability-in-alaga-home-security-wifi-camera","tags":["Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55810"},{"url":"https://www.alagaai.com"},{"url":"https://github.com/advisories/GHSA-qpx6-p48h-5cr8"}],"sources":{"cve":[{"id":"CVE-2025-55810","description":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.","status":"published","published":"2025-11-13T00:00:00Z","modified":"2025-11-14T18:04:05.466Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:32:52.839698Z"}],"euvd":[{"id":"EUVD-2025-175370","description":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.","status":"published","published":"2025-11-13T00:00:00Z","modified":"2025-11-14T18:04:05Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:16.95916Z"}],"ghsa":[{"id":"GHSA-qpx6-p48h-5cr8","title":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware...","description":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.","status":"published","published":"2025-11-13T21:31:19Z","modified":"2025-11-14T18:31:35Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:04:48.557805Z"}],"nvd":[{"id":"CVE-2025-55810","description":"A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.","status":"published","published":"2025-11-13T20:15:51.053Z","modified":"2026-11-05T14:10:00.273Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-434"],"updated_at":"2026-11-05T19:55:51.56159Z"}]}}