Brickcom Camera Unauthenticated Access Scanner

Brickcom Camera is a product line known for its IP cameras that are employed across various industries for surveillance purposes. These cameras are used in households, businesses, and public places to ensure security and monitor activities. Used globally, Brickcom cameras rely on robust network connections to deliver real-time video feeds. They offer features like real-time monitoring, remote access, and integration with other security systems. These cameras serve critical roles in environments requiring extensive surveillance and security. Therefore, ensuring the privacy and security of the video feeds they produce is of utmost importance.

The vulnerability identified involves unauthenticated access to Brickcom Camera's media endpoints. Exploiting it allows unauthorized users to retrieve camera snapshots without needing credentials. This issue primarily affects configurations exposing the ONVIF protocol, often overlooked in default settings. This vulnerability can lead to exposure of sensitive visual information. Attackers can access live feeds, potentially leading to privacy violations or other malicious activities. Consequently, securing these endpoints is crucial to preventing unauthorized access to camera snapshots.

The technical details pertain to how the vulnerability can be exploited through a simple GET request to specific ONVIF media endpoints. The endpoint `media.cgi?action=getSnapshot` is particularly susceptible, returning snapshots in JPEG format if proper authentication isn't enforced. The headers in responses usually indicate the inclusion of image/jpeg, confirming the presence of unauthorized access. Attackers with knowledge of the endpoint paths can exploit them without detection if they are unsecured. This vulnerability emphasizes the need for strong, enforced authentication mechanisms to protect media endpoints.

Possible effects of exploiting this vulnerability include unauthorized individuals gaining access to real-time camera snapshots. This can lead to severe privacy breaches and unauthorized surveillance. Attackers might observe and record sensitive activities, potentially leading to data leaks or breaches. Additionally, security systems relying on these camera feeds might be compromised, as malicious actors can manipulate or intercept videos. This exploitation could also result in reputational damage for organizations relying on Brickcom cameras, highlighting the importance of securing these systems.

REFERENCES

• https://cxsecurity.com/issue/WLB-2026020031