CyberzSOC

Publication detail
← Back to advisories & guidance

ICSA-25-273-07: LG Innotek Camera Multiple Models ↗ source

September 30, 2025 CISA ICS Advisory
Source: https://www.cisa.gov/news-events/ics-advisories/icsa-25-273-07

Summary

Successful exploitation of this vulnerability could allow an attacker to gain administrative access to the device. CVE-2025-10538: An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information.

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSA-25-273-07
Status
Final · version 1
Initial release
2025-09-30
Last revised
2025-09-30
Vendor
LG Innotek
Critical infrastructure sectors
Commercial Facilities
Deployed
Worldwide
Vendor headquarters
South Korea

No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.

Credit: Souvik Kandar

Affected products (2)
  • LG LND7210 — all versions
  • LG LNV7210R — all versions

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2025-10538 CWE-288 Authentication Bypass Using an Alternate Path or Channel 8.6 High An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information.

Mitigation: LG Innotek is aware of the vulnerability but has noted this is an end-of-life product that can no longer be patched.

Mitigation: Please visit the LG Security Center for further guidance. ↗

Affected, fixed & timeline

Affected:

  • LG LND7210 all versions
  • LG LNV7210R all versions

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2025-10538 8.8 High LG Innotek Camera Model LND7210 An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain ac…

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.