CVE-2026-50005: Brickcom Cameras Use of Default Credentials

Synopsis

Use of default credentials in Brickcom Cube, Dome, Bullet, and Box cameras (firmware version 3.2.3.5.6) allows any unauthenticated attacker with local access to the host or device to silently read camera feeds and gain high-impact access to systems beyond the camera itself. No authentication is required to exploit this weakness. Successful exploitation grants full read access to video feeds and high-impact confidentiality and integrity access to systems in scope beyond the vulnerable component. HarborGuard tracks this advisory for patch availability and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The CVSS vector specifies AV:L, meaning the attacker needs an existing shell or process on the host rather than a path over the network.

• AuthenticationNot required

  PR:N indicates no credentials or account are required; the default credentials embedded in the firmware itself are the vulnerability being exploited.

• Victim interactionNot required

  UI:N means the attacker does not need any user or administrator to take an action to trigger the exploit.

• Attack complexityDetail

  AC:L indicates the exploit is reliable and condition-free, requiring no race conditions, special memory layout, or environmental setup.

Blast Radius

• Reads live and stored camera feeds, exposing physical surveillance data captured by the affected Brickcom device.
• Gains high confidentiality access to systems and components beyond the camera itself (SC:H), such as network segments or management interfaces reachable from the device.
• Modifies or manipulates systems in the broader environment beyond the vulnerable component (SI:H), enabling tampering with connected infrastructure.
• The camera's own availability is not directly impacted, meaning compromise can persist silently without causing observable service disruption on the device itself.