CVE-2026-65894
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to live video snapshots from the targeted device.
Risk Assessment
The organization risks unauthorized access to the live video stream from the IP camera, potentially compromising privacy and security of the monitored area.
Recommendation
Update the CP PLUS EZ-P21 IP camera firmware to a version that fixes HTTP authentication, and implement strong password policies and network access restrictions.
Other vulnerabilities in CP PLUS EZ-P21 IP Camera
Original NVD description (English source)
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to live video snapshots from the targeted device.