A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the UART interface. This is achieved by inducing a read error from the SPI flash memory during the boot, by shorting a data pin of the IC to ground. An attacker can then dump the entire firmware, leading to the disclosure of sensitive information including cryptographic keys and user configurations.
References
| Link | Resource |
|---|---|
| http://blurams.com | Product |
| http://flare.com | Not Applicable |
| https://lessonsec.com/cve/cve-2025-65396/ | Broken Link |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Feb 2026, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Blurams dome Flare Firmware
Blurams Blurams dome Flare |
|
| CPE | cpe:2.3:o:blurams:dome_flare_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:blurams:dome_flare:-:*:*:*:*:*:*:* |
|
| References | () http://blurams.com - Product | |
| References | () http://flare.com - Not Applicable | |
| References | () https://lessonsec.com/cve/cve-2025-65396/ - Broken Link |
Information
Published : 2026-01-14 17:16
Updated : 2026-02-03 18:38
NVD link : CVE-2025-65396
Mitre link : CVE-2025-65396
CVE.ORG link : CVE-2025-65396
JSON object : View
Products Affected
blurams
- dome_flare_firmware
- dome_flare