Auth bypass in Davantis Dfusion

CVE-2025-41017

Inadequate access control vulnerability in Davantis DDFUSION v6.177.7, which allows unauthorised actors to retrieve perspective parameters from security camera settings by accessing “/cameras/<CAMERA_ID>/perspective”.

Vulnerability class: Broken Access Control

EPSS: 0.003 (20.1th percentile) — read the EPSS interpretation.