EseeCloud lets attackers take over device binding and read serial IDs
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Tampering
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-915.
Summary
Guangzhou Juan IoT Technology EseeCloud App through 4.9.6 and EseeCloud Firmware through 4.9.86.0 are affected. The server does not check whether a device is already bound to another account, so it unbinds the device from its current owner and rebinds it to the requesting account (CWE-915). A remote attacker with no privileges and no user interaction can take over a device and obtain its full serial ID.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Description from the CNA
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Guangzhou Juan IoT Technology Co., Ltd. | EseeCloud App | up to 4.9.6 | — | No fix listed | CNA |
| Guangzhou Juan IoT Technology Co., Ltd. | EseeCloud Firmware | up to 4.9.86.0 | — | No fix listed | CNA |
- EseeCloud App VendorGuangzhou Juan IoT Technology Co., Ltd. Affected up to 4.9.6 Fixed in — No fix listed CNA
- EseeCloud Firmware VendorGuangzhou Juan IoT Technology Co., Ltd. Affected up to 4.9.86.0 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for EseeCloud App. The sources list no fixed version for EseeCloud Firmware.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Timeline
- 2026-10-16 Threatist record created from CVE-2026-97858
References
More Guangzhou Juan IoT Technology Co., Ltd. vulnerabilities
- TI-2026-75313 Hard-coded credentials in EseeCloud devices allow remote login CVSS 4.0CRITICAL 9.3
- TI-2026-75312 Response discrepancy in EseeCloud lets attackers enumerate devices CVSS 4.0MEDIUM 6.9
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences