LG Innotek

A serious security vulnerability has been discovered in LG Innotek's LNV5110R camera model that could allow cybercriminals to gain complete administrative control over affected devices. This critical vulnerability allows remote admin takeover and can be exploited to manipulate camera feeds, access sensitive surveillance data, or use compromised devices as pivot points for broader network attacks. The flaw is network-accessible and has high attack complexity. No security patches are available as the product is end-of-life. Users must rely on defensive measures such as isolating devices from internet access and implementing network segmentation behind firewalls.

Source: https://cybersecuritynews.com/lg-innotek-camera-vulnerabilities/

TPRM report: https://scoringcyber.rankiteo.com/company/lg-innotek

"id": "lg-758072825",
"linkid": "lg-innotek",
"type": "Vulnerability",
"date": "7/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Electronics',
                        'name': 'LG Innotek',
                        'type': 'Manufacturer'}],
 'attack_vector': 'Network',
 'date_publicly_disclosed': '2025-07-24',
 'description': 'A serious security vulnerability has been discovered in LG '
                'Innotek’s LNV5110R camera model that could allow '
                'cybercriminals to gain complete administrative control over '
                'affected devices.',
 'impact': {'operational_impact': 'Remote code execution, administrative '
                                  'access takeover',
            'systems_affected': 'LG Innotek LNV5110R cameras'},
 'initial_access_broker': {'entry_point': 'Network'},
 'post_incident_analysis': {'corrective_actions': ['Isolating devices from '
                                                   'internet access',
                                                   'Implementing network '
                                                   'segmentation behind '
                                                   'firewalls'],
                            'root_causes': 'Authentication bypass using an '
                                           'alternate path or channel '
                                           '(CWE-288)'},
 'recommendations': ['Implement defense-in-depth strategies',
                     'Use VPNs for remote access',
                     'Ensure control system networks remain isolated from '
                     'business networks'],
 'references': [{'date_accessed': '2025-07-24', 'source': 'CISA Advisory'}],
 'response': {'containment_measures': ['Isolating devices from internet access',
                                       'Implementing network segmentation '
                                       'behind firewalls'],
              'network_segmentation': 'Implementing network segmentation '
                                      'behind firewalls',
              'remediation_measures': ['Defense-in-depth strategies',
                                       'Using Virtual Private Networks (VPNs) '
                                       'for remote access']},
 'title': 'Critical Vulnerability in LG Innotek LNV5110R Cameras',
 'type': 'Vulnerability Exploitation',
 'vulnerability_exploited': 'CVE-2025-7742'}