Advisories › CareCam › ICSA-26-251-01
CareCam Pro IP Cameras: 1 CVE, Medium 6.8
Summary
CISA reports 1 vulnerability in CareCam ANJIA AJL33PC0801 Firmware. Weakness type: Use of Hard-coded Credentials. Successful exploitation of this vulnerability could allow an attacker to take full control of the device. Highest CVSS v3 score: 6.8 (Medium), not remotely exploitable per its CVSS vector.
What to do: Plan: CareCam has not responded to CISA's attempts for coordination. Users are encouraged to reach out to CareCam.
At a glance
- Vendor
- CareCam
- Products
- ANJIA AJL33PC0801 Firmware
- CVEs
- CVE-2026-85083
- Highest CVSS v3
- 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Commercial Facilities
- Deployed
- Worldwide
- Vendor HQ
- China
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-85083 | Use of Hard-coded Credentials | 6.8 | – | No | The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially resulting in complete device compromise. |
Affected products (1)
- CareCam ANJIA AJL33PC0801 Firmware: linux_linux_202008261138_svn13796_/_Bootloader_U-Boot_2010.06_compiled_2020-08-26
Vendor fixes and mitigations (from advisory)
- Mitigation: CareCam has not responded to CISA's attempts for coordination. Users are encouraged to reach out to CareCam.
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.