Brickcom Camera Unauthenticated Access Scanner

Brickcom Camera is a product line known for its IP cameras that are employed across various industries for surveillance purposes. These cameras are used in households, businesses, and public places to ensure security and monitor activities. Used globally, Brickcom cameras rely on robust network connections to deliver real-time video feeds. They offer features like real-time monitoring, remote access, and integration with other security systems. These cameras serve critical roles in environments requiring extensive surveillance and security. Therefore, ensuring the privacy and security of the video feeds they produce is of utmost importance.

The vulnerability identified involves unauthenticated access to Brickcom Camera's media endpoints. Exploiting it allows unauthorized users to retrieve camera snapshots without needing credentials. This issue primarily affects configurations exposing the ONVIF protocol, often overlooked in default settings. The vulnerability arises from insufficient access controls on the snapshot endpoint, which fails to verify user identity before granting access to sensitive visual data.

Specifically, the vulnerable endpoint is the ONVIF media service URL, typically accessible via HTTP on port 80 or 8080. The parameter 'SnapshotUri' in the GetSnapshotUri request is exposed without authentication, allowing attackers to directly fetch JPEG images from the camera's live feed. This endpoint is often left unsecured in default configurations, especially when cameras are deployed without proper network segmentation.

If exploited, an attacker can gain unauthorized access to live camera snapshots, leading to privacy violations and potential surveillance of sensitive areas. This can compromise security in environments like homes, offices, or public spaces, enabling malicious activities such as spying or reconnaissance. The impact is heightened in critical infrastructure settings where visual data is confidential.