CVE-2022-25584

HIGH

Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-25584. PoCs published by yichenC1c.

AI-analyzed exploit summary This repository documents an unauthenticated access vulnerability in FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY, allowing attackers to obtain monitoring images and sensitive information via specific URLs.

Description

Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY allows attackers to access sensitive information.

Exploits (1)

nomisec WRITEUP
by yichenC1c · poc
https://github.com/yichenC1c/CVE-2022-25584

This repository documents an unauthenticated access vulnerability in FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY, allowing attackers to obtain monitoring images and sensitive information via specific URLs.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY
No auth needed
Prerequisites: Network access to the vulnerable device
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/NSSCYCTFER/Flexwatch

Scores

CVSS v3 7.5
EPSS 0.0125
EPSS Percentile 65.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (1)
flexwatch/fw3170-ps-e_firmware 4.23-3000_gy
Published Apr 05, 2022
Tracked Since Feb 18, 2026