CVE-2025-5124

CVE-2025-5124 is a critical vulnerability affecting the administrative interface of several Sony SNC series IP cameras (SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N, and SNC-RX570N up to version 1.30), allowing for the use of default credentials. With a CVSS score of 8.1 (HIGH), this vulnerability can be exploited remotely with high attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While the exploit has been publicly disclosed, its real existence is currently doubted, and exploitation is considered difficult. Despite public disclosure, there is no evidence of active exploitation, no known exploit tools like Metasploit or Nuclei, and minimal community discussion or media coverage. Sony has acknowledged the issue and recommends users change initial passwords, referencing their "Hardening Guide."