Vulnerabilities

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.

An attacker could derive the camera's Wi-Fi password and connect to its wireless network.

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position.

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams.