TI-2026-36831 CVE-2026-50005 · GHSA-4qgh-qg2j-6vjw
Brickcom Cameras Use of Default Credentials
Priority LOW 37
Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.
Vulnerabilities
4 records
TI-2026-36994 CVE-2026-50245 · GHSA-p643-w432-6q35
Brickcom Cameras Missing Authentication for Critical Function
Priority LOW 37
Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.
TI-2013-03222 CVE-2013-3689 · GHSA-8g2m-jc8c-565j
Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other…
Priority LOW 37
Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attacke…
TI-2013-03223 CVE-2013-3690 · GHSA-7549-gqq5-9cxg
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom…
Priority MEDIUM 44
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows re…