CVE-2025-63667
Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints without authentication.
Published:Nov 12, 2025
Last Modified:Jan 5, 2026
EPS:Nov 12, 2025
EPSS Score:0.0009
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Asecam
Product
H43
Asecam
H43
Vendor
Asecam
Product
Ip Camera
Asecam
Ip Camera
Vendor
Asecam
Product
Ip Camera Firmware
Asecam
Ip Camera Firmware
Vendor
Keview
Product
H43
Keview
H43
Vendor
Keview
Product
Ip Camera
Keview
Ip Camera
Vendor
Keview
Product
Ip Camera Firmware
Keview
Ip Camera Firmware
Vendor
Simicam
Product
H44
Simicam
H44
Vendor
Simicam
Product
Ip Camera
Simicam
Ip Camera
Vendor
Simicam
Product
Ip Camera Firmware
Simicam
Ip Camera Firmware
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
