Multiple India-based CCTV Cameras

Multiple India-based CCTV cameras from D-Link, Sparsh Securitech, and Securus CCTV are affected by a critical authentication bypass vulnerability (CVE-2025-13607) with CVSS v4 score of 9.3. The vulnerability allows remote attackers to access camera configuration information and account credentials without authentication through a vulnerable URL. Affected products include D-Link DCS-F5614-L1 versions v1.03.038 and prior. D-Link has released security updates, while other vendors have not responded to CISA coordination efforts. The vulnerability is exploitable remotely with low attack complexity and could result in information disclosure including credential capture.