Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-7742 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:7.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-04 [email protected]AdvisoryRemedy

Weakness Enumeration

CWE-IDCWE NameSource
CWE-288Authentication Bypass Using an Alternate Path or Channel[email protected]

Affected Products

ProductVersions
LG Innotek LNV5110R
< 1.0

CPE

  • cpe:2.3:h:lg:lnv5110r:*:*:*:*:*:*:*:*

Remediation

  • Workaround:low effort

    Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the Internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs).

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-7742
NVD Published Date:
Jul 25, 2025
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2025-7742 Details - Not Deferred