Shenzhen Liandian Communication V380 IP Camera/AppFHE1 1.0.6.0 Telnet Service hard-coded credentials

Summaryinfo

A vulnerability identified as critical has been detected in Shenzhen Liandian Communication V380 IP Camera and AppFHE1 1.0.6.0. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. This vulnerability is known as CVE-2025-7503. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in Shenzhen Liandian Communication V380 IP Camera and AppFHE1 1.0.6.0. It has been classified as very critical. This affects some unknown functionality of the component Telnet Service. The manipulation with an unknown input leads to a hard-coded credentials vulnerability. CWE is classifying the issue as CWE-798. The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, default credentials. The Telnet service is enabled by default and is not disclosed or configurable via the device’s web interface or user manual. An attacker with network access can authenticate using default credentials and gain root-level shell access to the device. The affected firmware version is AppFHE1_V1.0.6.0 (Kernel: KerFHE1_PTZ_WIFI_V3.1.1, Hardware: HwFHE1_WF6_PTZ_WIFI_20201218). No official fix or firmware update is available, and the vendor could not be contacted. This vulnerability allows for remote code execution and privilege escalation.

The weakness was published by Aoun Shah. The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2025-7503 since 07/11/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/11/2025). MITRE ATT&CK project uses the attack technique T1110.001 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Network Camera Software

Vendor

• Shenzhen Liandian Communication

Name

• AppFHE1
• V380 IP Camera

Version

• 1.0.6.0

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion