{"id":"01M6MYDZYB31WPVATDFE7KQAVC","product_id":"01M6MYDZG6V768X00XBMZHZRRW","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Bitdefender reported SD-card access weaknesses in March 2022. It said Cam v1 was discontinued without further fixes, while patches had been released for v2 and v3.","body_md":"Bitdefender’s March 2022 disclosure described unauthenticated access to SD-card contents and other security weaknesses. It said Cam v1 was discontinued without further security fixes, while v2 and v3 had been patched.","method":null,"source_method":null,"sources":[{"title":"Vulnerabilities Identified in Wyze Cam IoT Device","url":"https://www.bitdefender.com/en-us/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device","publisher":"Bitdefender","publishedAt":"2022-03-29"},{"title":"Wyze Cam security research whitepaper","url":"https://www.bitdefender.com/files/News/CaseStudies/study/413/Bitdefender-PR-Whitepaper-WCam-creat5991-en-EN.pdf","publisher":"Bitdefender","publishedAt":"2022-03-29"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Deliberately narrowed the incident to the researcher’s historical v1 narrative and SD-card access finding without CVE identifiers or guessed severity. The original 2022 paper supports a historical v1 association with the listed CVEs; omission of v1 from current CNA affected lists does not disprove that association. This is not independent device verification.","created_at":1793851850699,"updated_at":1793917832000,"slug":"wyze-cam-v1","vendor":"Wyze","model":"Cam v1","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYDZYB31WPVATDFE7KQAVC","product_url":"https://isitspying.com/p/wyze-cam-v1","findings":[{"id":"accuracy:01M6MYDZYB31WPVATDFE7KQAVC:0","report_id":"01M6MYDZYB31WPVATDFE7KQAVC","kind":"security_vulnerability","severity":"unrated","detail":"Bitdefender reported unauthenticated SD-card access; its 2022 report says Cam v1 no longer received security fixes.","ai_model":null}],"contacted_hosts":[],"evidence":[]}