VULNERABILITY INTELLIGENCE

CVE-2025-7742

EPSS probability0.74%
CISA KEVNot currently listed
Published2025-07-25
Last modified2026-06-17

Description

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level.

Weakness classification

  • product.security@lge.com: CWE-288

Primary references