CVE-2025-55810: Alagaai S-CW2503C-H Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.

Affected products

• Alagaai S-CW2503C-H Firmware: version 1.4.2 only

Published 2025-11-13. Last modified 2026-06-17.