10 matches found
CVE-2026-85497
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database could recover the associated credential, which may also be reusable acro...
CVE-2026-81321
CareCam CM2507 IP cameras store configured wireless network credentials (network identifier and pre-shared key) in cleartext within the device filesystem. An attacker who obtains filesystem access—through physical access, a debugging interface, or another vulnerability—can recover these credentia...
CVE-2026-85497
CareCam CM2507 IP cameras store the root-account password using a fixed legacy hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database can recover the credential, which may be reusable across other devices running the same fi...
EUVD-2026-83049
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database could recover the associated credential, which may also be reusable acro...
CVE-2026-88259
CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...
CVE-2026-84400
CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...
CVE-2026-85478
The CareCam CM2507 IP camera running firmware HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface with no authentication required . An attacker with physical access can interrupt the normal boot process and inspect or modify boot configuration, firmware da...
CVE-2026-84400
CareCam CM2507 IP cameras are affected by an insufficiently protected network maintenance mechanism that can activate a remote debugging service , classified as missing authentication for a critical function. An attacker on the same local network who satisfies certain device state conditions coul...
CVE-2026-88259
CareCam CM2507 IP cameras are affected by a missing authentication for critical function vulnerability in their network video streaming service. An unauthenticated attacker with network access to the device can retrieve live camera video without credentials. The CISA advisory (ICSA-26-258-08 ) as...