Read the docs

Brickcom

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Brickcom records in CISA KEV

No Brickcom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
100ap Device Firmware 2 records MEDIUM Fb-100ap 2 records MEDIUM Md-100ap 2 records MEDIUM Ob-100ae 2 records MEDIUM Osd-040e 2 records MEDIUM Wcb-100ap 2 records MEDIUM Wfb-100ap 2 records MEDIUM

Records

4 records

TI-2013-03223 CVE-2013-3690 · GHSA-7549-gqq5-9cxg

Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom…

Priority MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows re…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.12381 Published 2013-10-01 No fix listed CWE-352
TI-2026-36994 CVE-2026-50245 · GHSA-p643-w432-6q35

Brickcom Cameras Missing Authentication for Critical Function

Priority LOW 37

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

CVSS 4.0HIGH 8.3 Local No auth No interaction EPSS 0.00156 Published 2026-06-11 No fix listed CWE-306
TI-2026-36831 CVE-2026-50005 · GHSA-4qgh-qg2j-6vjw

Brickcom Cameras Use of Default Credentials

Priority LOW 37

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.

CVSS 4.0HIGH 8.3 Local No auth No interaction EPSS 0.00197 Published 2026-06-11 No fix listed CWE-1392
TI-2013-03222 CVE-2013-3689 · GHSA-8g2m-jc8c-565j

Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other…

Priority LOW 37

Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attacke…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01482 Published 2013-10-04 No fix listed CWE-264
Open these records in search →