Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-28231: Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.

CVE-2025-28231 · published 1 year ago

Summary

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.

Original advisory text

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.

References

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-2823...

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

9.1 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-284Improper Access Control

Timeline

Published18 Apr 2025

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2025-28231 · NVD

Track software like this

Free during beta