What is GHSA-9wfh-9p7m-mp7r?

GHSA-9wfh-9p7m-mp7r is a security advisory published by GitHub Security Advisories with High severity. Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains...

Which CVE IDs does GHSA-9wfh-9p7m-mp7r cover?

GHSA-9wfh-9p7m-mp7r covers the following CVE IDs: CVE-2025-70962. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9wfh-9p7m-mp7r?

GHSA-9wfh-9p7m-mp7r has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-9wfh-9p7m-mp7rHighCVSS 7.5

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-70962 →

📋 Description

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-70962
https://github.com/namaek2/CVE-2025-70962
https://www.zositech.com
https://github.com/advisories/GHSA-9wfh-9p7m-mp7r