HMT.CM2507 Firmware vulnerabilities
4 known vulnerabilities in HMT.CM2507 Firmware from CareCam. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
HMT.CM2507 Firmware: Use of Password Hash With Insufficient Computational Effort
CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database could recover the associated creden
- 9.8 Critical severity
HMT.CM2507 Firmware: Cleartext Storage of Sensitive Information
CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network i
- 7.5 High severity
HMT.CM2507 Firmware: Missing Authentication for Critical Functionality
CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video.
- 7.5 High severity
HMT.CM2507 Firmware: Empty Password in Configuration File
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user, media-profile, and st