important · Firmware — Camera
Unauthenticated clients can watch a CareCam CM2507 feed and enter privileged ONVIF functions.
Affects
CareCam HMT.CM2507, an embedded IP security camera.
The live-video service performs no authentication, while a privileged ONVIF account accepts an empty password.
Detail and 2 sources
No fixed release is identified in the cited coordination record.