CVE-2025-36513

MEDIUM

i-PRO Surveillance Cameras - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed.

References (2)

Core 2

Core References

Various Sources

https://i-pro.com/products_and_solutions/en/surveillance/solutions/technologies/cyber-security/psirt/security-advisories

Third Party Advisory

https://jvn.jp/en/jp/JVN10964289/

Scores

CVSS v3 4.3

EPSS 0.0013

EPSS Percentile 2.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-352

Status published

Products (1)

i-PRO Co., Ltd./Surveillance cameras provided by i-PRO Co., Ltd. see the information provided by the vendor

Published Jun 06, 2025

Tracked Since Feb 18, 2026