As cited
Copy frozen at (site build).
vulnerabilities
CareCam CM2507
The CareCam CM2507 IP camera firmware version HMT.CM2507 v251211.1507 contains seven vulnerabilities spanning missing authentication, empty passwords, insufficient credential protection, and cleartext storage of wireless credentials. Exploitation could enable unauthorized video access, privilege escalation, arbitrary code execution, and credential recovery. CareCam has not engaged with CISA coordination efforts to address these issues.
Why it matters: Organizations deploying CareCam CM2507 cameras in commercial facilities worldwide face immediate risk of unauthorized surveillance and network compromise if these devices are exposed to network access; immediate isolation and contact with CareCam for patches or guidance is necessary.
- Source published
- First seen by Cybersecurity Tracker