nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-11757 CVE-2025-11757
HIGH
Improper Neutralization of Wildcards or Matching Symbols in CloudEdge Online Cameras and App
Record summary
CVE-2025-11757 has a selected CVSS score of 8.7 (high).
Description
The CloudEdge Cloud does not sanitize the MQTT topic input, which could allow an attacker to leverage the MQTT wildcard to receive all the messages that should be delivered to other users by subscribing to the a MQTT topic. In these messages, the attacker can obtain the credentials and key information to connect to the cameras from peer to peer.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 21, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
CloudEdge AppBrowse CloudEdge / CloudEdge AppDefault status: unaffected | CVE List | 4.4.2 | affected |
References
2cisa.govGovernment resource
https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-05