← Database

CVE-2025-25680

HIGH CVSS: 7.7 Published: 2025-03-11 Modified: 2026-06-17

Description

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuya_ipc_direct_connect function of the anyka_ipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera.

Affected Platforms

Lsc Ptz Dual Band Camera FirmwareLsc Ptz Dual Band Camera

Weakness Type

CWE-94

References