CareCam CM2507
Successful exploitation of these vulnerabilities could allow an attacker to access live video and sensitive device information, enable unauthorized services, execute arbitrary code, modify device operation, and recover stored credentials.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-85497US | — | — | ||
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obt… | ||||
| CVE-2026-85478US | —OT elevated | — | ||
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attack… | ||||
| CVE-2026-81321US | —OT elevated | — | ||
CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debu… | ||||
| CVE-2026-88259US | —OT elevated | — | ||
CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device co… | ||||
| CVE-2026-84400US | —OT elevated | — | ||
CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who… | ||||
| CVE-2026-84398US | — | — | ||
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could acces… | ||||
| CVE-2026-81305US | — | — | ||
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-258-08 JSONself
- ICSA Advisory ICSA-26-258-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (7)
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
- MitigationHMT.CM2507 Firmware
CareCam has not responded to CISA's attempts to coordinate. Users are encouraged to reach out to CareCam for more information.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan