CareCam vulnerabilities
We track 4 vulnerabilities in CareCam products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
Latest CareCam vulnerabilities
- 9.8 Critical severity
HMT.CM2507 Firmware: Use of Password Hash With Insufficient Computational Effort
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database could recover the associated creden
- 9.8 Critical severity
HMT.CM2507 Firmware: Cleartext Storage of Sensitive Information
CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network i
- 7.5 High severity
HMT.CM2507 Firmware: Missing Authentication for Critical Functionality
CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video.
- 7.5 High severity
HMT.CM2507 Firmware: Empty Password in Configuration File
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user, media-profile, and st