CISA warns of hard-coded credential flaw in CareCam Pro IP cameras

By Atlas Watchline Staff · Regulatory · September 8, 2026

CISA says a hard-coded credential flaw in one CareCam Pro IP camera firmware version could let someone with physical access take over the device.

CISA on Sept. 8 published an industrial control systems advisory on a hard-coded credential vulnerability in CareCam Pro IP Cameras. The agency said the flaw affects one ANJIA AJL33PC0801 firmware version and could let an attacker with physical access gain privileged bootloader access.

CISA said successful exploitation could allow unauthorized changes to firmware and system configuration and could lead to full device compromise. The agency rated the issue CVSS 3.1 6.8, or medium, and CVSS 4.0 7, or high.

The advisory identifies the product as CareCam Pro IP Cameras and lists the affected firmware version as linux_linux_202008261138_svn13796_/_Bootloader-U-Boot_2010.06_compiled_2020-08-26. CISA said the weakness is use of hard-coded credentials, classified as CWE-798, for bootloader authentication.

CISA said the vulnerability is not exploitable remotely. The advisory says no known public exploitation specifically targeting the issue has been reported to CISA.

The notice lists CareCam as the vendor, with headquarters in China and deployment worldwide. CISA said the product status is known_affected and placed the issue in the Commercial Facilities sector.

The agency said CareCam did not respond to its coordination attempts. CISA encouraged users to reach out to the vendor.

The vulnerability was reported to CISA by Omkar Mali, according to the advisory.

Sources

• CISA Cybersecurity Advisory: ICSA-26-251-01

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.