CVE-2025-56438

Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days.

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card.

Published 2025-10-24. Last modified 2026-07-05.