CVE-2025-7742 Authentication Bypass in LG Innotek Camera
Attackers can bypass authentication to upload files and execute arbitrary commands with administrator privileges on LG Innotek cameras.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-7742?
CVE-2025-7742 is a high-severity authentication bypass vulnerability in LG Innotek Camera Model LNV5110R, published on 24 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.
Weakness: CWE-288
Which versions are affected by CVE-2025-7742?
How do I fix CVE-2025-7742?
No fix has been published for CVE-2025-7742 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-7742 being exploited?
There is no known exploitation of CVE-2025-7742 in the wild and no public exploit code.
Sources
Also known as GHSA-2rv3-3939-3h9h.