CVE-2025-41017 — Multiple vulnerabilities in DFUSION by Davantis

CVE-2025-41017

Multiple vulnerabilities in DFUSION by Davantis PUBLISHED

Description (CNA)

Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.

Affected (CNA)

Vendor / product	Versions
Davantis / DFUSION	affected prior to 6.186.1

CWE

CWE-862

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dfusion-davantis

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.