CVE-2023-38025: Myspotcam Fhd 2 Firmware

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.

Affected products

• Myspotcam Fhd 2 Firmware: before 1.0039 (fixed in 1.0039)

Published 2023-08-28. Last modified 2026-06-17.