CVE-2025-7214 - CVE House

Back to Database

Status published Low CVE-2025-7214

FNKvision FNK-GU2 MD5 shadow risky encryption

1 CVSS

Vulnerability Description

A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected by this vulnerability is an unknown functionality of the file /etc/shadow of the component MD5. The manipulation leads to risky cryptographic algorithm. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7214

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

0xHasta (VulDB User)

References

More from FNKvision

View All →

FNKvision Y215 CCTV Camera passwd crypt weak hash

FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor

FNKvision Y215 CCTV Camera wpa_supplicant.conf information disclosure

FNKvision Y215 CCTV Camera Firmware passwd hard-coded credentials

FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage

Affected Vendor

FNKvision

View all reports →

Affected Software

FNK-GU2

Vulnerable Versions:

40.1.0, 40.1.1, 40.1.2, 40.1.3, 40.1.4, 40.1.5, 40.1.6, 40.1.7

Timeline

Official Publish: July 9th, 2025

Last Modified: July 9th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-327 CWE-310

MITRE ATT&CK TTPs

T1040 Network Sniffing

Credential Access

T1552 Unsecured Credentials

Credential Access

T1557 Adversary-in-the-Middle

T1078 Valid Accounts

T1041 Exfiltration Over C2 Channel