Vulnerability in Ubia Ubox Android
CVE-2025-12636
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings.
EPSS: 0.003 (16.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Ubia Ubox Android — versions 0
- Ubia Ubox Ios — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-12636?
- CVE-2025-12636 is a medium-severity vulnerability in Ubia Ubox Android, classified under Insufficiently Protected Credentials. CVSS score: 6.5/10. Published 2025-11-06.
- How severe is CVE-2025-12636?
- Medium severity. CVSS v3 base score is 6.5 out of 10.