CVE-2025-9983 describes an authentication bypass vulnerability in GALAYOU G2 cameras, specifically tested on version 11.100001.01.28, allowing unauthorized access to video streams via RTSP. Despite default random credentials, these are not enforced, enabling anyone on the local network to view the camera feed. With a CVSS score of 7.1 (HIGH), this vulnerability poses a significant risk of unauthorized information disclosure (VC:H) due to its low attack complexity (AC:L) and lack of required privileges (PR:N) or user interaction (UI:N). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| GALAYOU | G2 | 11.100001.01.28CNA affecteddefault unknown |
CVSS version used by this source: 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.4 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.