IP Camera 0-day
Pre-auth RCE to a root shell on a consumer IP camera
- 0-daypreviously unknownreported to KISA
- Pre-authno credentials
- rootshell on the device
The full write-up (firmware extraction, the vulnerable path, and the exploit) goes up here once the vendor ships a fix. Until then it is listed on the research page without identifying details.