CVE-2025-56438

—

CVSS 3.1

6.8 medium

EPSS

<1%p3

Published

Oct 24, 2025 (Oct 24, 2025)

Modified

Jul 5, 2026

Description

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card.

Weakness: CWE-345
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.