CVE-2026-81305
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device.
Risk Assessment
A person with physical access to the camera can execute arbitrary code, leading to full device takeover.
Recommendation
Disable automatic script execution from removable media or implement authenticity and integrity verification, and restrict physical access to the devices.
Other vulnerabilities in CM2507 IP cameras
Original NVD description (English source)
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS