CyberRota Analysis
AI-GeneratedCM2507 IP cameras are vulnerable due to their acceptance of empty passwords for privileged accounts via the ONVIF management service. This flaw allows attackers with network access to exploit the device, gaining unauthorized access to sensitive management functions and configuration data. Organizations using these cameras should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user, media-profile, and stream configuration information.