CVE-2025-66050

CRITICAL

No password set for administrative account in Vivotek IP7137 cameras

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-66050 has a selected CVSS score of 9.3 (critical).

Description

Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible to set up such a password, a user is not informed about such a need. The vendor has not replied to the CNA. Possibly all firmware versions are affected. Since the product has met End-Of-Life phase, a fix is not expected to be released.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 9, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

IP7137

Browse Vivotek / IP7137

Default status: unknown

CVE List0200aaffected

References

2