CVE-2025-7215 - CVE House

Back to Database

Status published Low CVE-2025-7215

FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage

1 CVSS

Vulnerability Description

A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to 40.1.7. Affected by this issue is some unknown functionality of the file /rom/wpa_supplicant.conf. The manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7215

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

0xHasta (VulDB User)

References

More from FNKvision

View All →

FNKvision Y215 CCTV Camera passwd crypt weak hash

FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor

FNKvision Y215 CCTV Camera wpa_supplicant.conf information disclosure

FNKvision Y215 CCTV Camera Firmware passwd hard-coded credentials

FNKvision FNK-GU2 MD5 shadow risky encryption

Affected Vendor

FNKvision

View all reports →

Affected Software

FNK-GU2

Vulnerable Versions:

40.1.0, 40.1.1, 40.1.2, 40.1.3, 40.1.4, 40.1.5, 40.1.6, 40.1.7

Timeline

Official Publish: July 9th, 2025

Last Modified: July 9th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-312 CWE-310

MITRE ATT&CK TTPs

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1530 Data from Cloud Storage

T1078 Valid Accounts

T1041 Exfiltration Over C2 Channel