{"id":"CVE-2025-65397","aliases":["EUVD-2026-2445","GHSA-23qf-cvxj-h26r"],"status":"published","title":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera...","description":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/public_key.der is not present in the file system. The vulnerability can be triggered by providing a maliciously crafted auth.ini file on the device's SD card.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00311,"percentile":0.24135,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-287"],"published":"2026-01-14T00:00:00Z","modified":"2026-07-05T17:17:22Z","products":[{"vendor":"blurams","product":"dome_flare_firmware"}],"references":[{"url":"https://lessonsec.com/cve/cve-2025-65397/","tags":["Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65397"},{"url":"https://lessonsec.com/cve/cve-2025-65397"},{"url":"http://blurams.com"},{"url":"http://flare.com"},{"url":"https://github.com/advisories/GHSA-23qf-cvxj-h26r"}],"sources":{"cve":[{"id":"CVE-2025-65397","description":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/public_key.der is not present in the file system. The vulnerability can be triggered by providing a maliciously crafted auth.ini file on the device's SD card.","status":"published","published":"2026-01-14T00:00:00Z","modified":"2026-07-05T16:13:33.467Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-287","CWE-20"],"updated_at":"2026-11-02T14:32:26.64278Z"}],"euvd":[{"id":"EUVD-2026-2445","description":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/public_key.der is not present in the file system. The vulnerability can be triggered by providing a maliciously crafted auth.ini file on the device's SD card.","status":"published","published":"2026-01-14T00:00:00Z","modified":"2026-07-05T16:13:33Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T18:20:13.899968Z"}],"ghsa":[{"id":"GHSA-23qf-cvxj-h26r","title":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera...","description":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/public_key.der is not present in the file system. The vulnerability can be triggered by providing a maliciously crafted auth.ini file on the device's SD card.","status":"published","published":"2026-01-14T18:31:38Z","modified":"2026-01-14T21:35:12Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:05:36.917125Z"}],"nvd":[{"id":"CVE-2025-65397","description":"An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 and earlier allows an attacker with physical access to the device to execute arbitrary commands with root privileges, if file /opt/images/public_key.der is not present in the file system. The vulnerability can be triggered by providing a maliciously crafted auth.ini file on the device's SD card.","status":"published","published":"2026-01-14T18:16:41.68Z","modified":"2026-07-05T17:17:22.853Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20","CWE-287"],"updated_at":"2026-11-02T14:11:57.915063Z"}]}}