CVE-2026-65893
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with elevated privileges on the targeted device.
Risk Assessment
The organization risks complete compromise of the IP camera by someone with physical access, potentially leading to malware installation, eavesdropping, or using the camera as an entry point into the network.
Recommendation
Update the CP PLUS EZ-P21 IP camera firmware to a version that disables or secures the debug feature, and restrict physical access to devices.
Other vulnerabilities in CP PLUS EZ-P21 IP Camera
Original NVD description (English source)
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with elevated privileges on the targeted device.

