CVE-2025-67070
Published: 09 January 2026
Summary
CVE-2025-67070 is a high-severity Authentication Bypass Using an Alternate Path or Channel (CWE-288) vulnerability. Its CVSS base score is 8.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 24.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-14 (Permitted Actions Without Identification or Authentication) and AC-2 (Account Management).
Deeper analysis
CVE-2025-67070 affects the Intelbras CFTV IP NVD 9032 R Ftd V2.800.00IB00C.0.T firmware, where an unauthenticated attacker can bypass the multi-factor authentication (MFA) mechanism during the password recovery process. This flaw enables the attacker to change the admin password and gain full access to the administrative panel. The vulnerability carries a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) and maps to CWE-288 (Authentication Bypass Using an Alternate Path or Channel).
Any unauthenticated attacker with network access to the affected device can exploit this issue with low complexity and no user interaction required. Successful exploitation allows the attacker to reset administrative credentials, bypassing MFA entirely, and achieve high-impact unauthorized access to the device's management interface, potentially compromising surveillance footage, configurations, and network controls.
A GitHub repository at https://github.com/teteco/intelbras-cftv-admin-bypass provides details on the exploit, including a proof-of-concept for the authentication bypass. No vendor advisories or patches are referenced in the available information.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-1680
Vulnerability details
A vulnerability exists in Intelbras CFTV IP NVD 9032 R Ftd V2.800.00IB00C.0.T, which allows an unauthenticated attacker to bypass the multi-factor authentication (MFA) mechanism during the password recovery process. This results in the ability to change the admin password and…
more
gain full access to the administrative panel.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct authentication bypass on public-facing admin panel via alternate recovery path enables exploitation of the web interface for unauthorized admin access.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
IA-5 requires secure management of authenticator lifecycle including resets, directly preventing MFA bypass during password recovery by enforcing protected change processes.
AC-14 limits and authorizes specific actions without identification or authentication, mitigating unauthorized password changes via alternate recovery paths.
AC-2 enforces secure account management for modifications like password changes, requiring proper authentication to prevent unauthenticated admin credential resets.