CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines, daily updates. Fast, privacy‑respecting. No ads, no tracking.

Lenovo Webcams Vulnerable to Remote BadUSB Exploitation

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Lenovo webcams running Linux are vulnerable to BadUSB attacks, allowing remote attackers to inject keystrokes and execute malicious commands. The vulnerabilities, codenamed BadCam (CVE-2025-4371), affect select models and can be exploited to compromise systems and maintain persistence. Lenovo has released firmware updates to mitigate the issue. The flaw enables attackers to weaponize webcams already connected to a computer, turning them into BadUSB devices. This marks a significant escalation in BadUSB attacks, as it does not require physical access to the device. The vulnerabilities were disclosed by Eclypsium researchers at DEF CON 33 and involve the lack of firmware validation in affected webcams.

Timeline

  1. 09.08.2025 22:00 1 articles · 1mo ago

    BadCam Vulnerabilities in Lenovo Webcams Disclosed

    Lenovo webcams running Linux are vulnerable to BadUSB attacks, allowing remote attackers to inject keystrokes and execute malicious commands. The vulnerabilities, codenamed BadCam (CVE-2025-4371), were disclosed at DEF CON 33 and affect select models. The flaw enables attackers to weaponize webcams already connected to a computer, turning them into BadUSB devices. This marks a significant escalation in BadUSB attacks, as it does not require physical access to the device. The vulnerabilities were disclosed by Eclypsium researchers at DEF CON 33 and involve the lack of firmware validation in affected webcams.

    Show sources
    Open in new tab

Information Snippets