{"items":[{"id":"01M6MYE4KZFVCVN5PRBKXPYJQ0","slug":"eufy-anker-eufycam-2-video-doorbell-2022-cloud-upload","vendor":"eufy (Anker)","oem":null,"model":"eufyCam 2 / Video Doorbell (2022 cloud upload)","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Cameras marketed as local-only storage. In late 2022 researchers showed thumbnails and, via the web portal, streams were reachable through Anker's cloud; Anker later acknowledged and changed the behaviour.","status":"confirmed","status_reason":"Vendor acknowledged the cloud uploads and portal access (The Verge, Feb 2023)","status_at":1793853872263,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851855487,"updated_at":1793853872263,"url":"https://isitspying.com/p/eufy-anker-eufycam-2-video-doorbell-2022-cloud-upload"},{"id":"01M6MYE3NRN9DYBECKW2DJ55YW","slug":"xmeye-based-cameras-and-nvrs","vendor":null,"oem":"Hangzhou Xiongmai Technology","model":"XMEye-based cameras and NVRs","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"White-label cameras/DVRs built on Xiongmai boards using the XMEye P2P cloud. SEC Consult (2018) found default admin credentials, predictable cloud IDs and an unsigned firmware update path.","status":"confirmed","status_reason":"SEC Consult disclosure and ICS-CERT advisory, Oct 2018","status_at":1793853871964,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851854520,"updated_at":1793853871964,"url":"https://isitspying.com/p/xmeye-based-cameras-and-nvrs"},{"id":"01M6MYE2V5VRX38NPB05X6GZ5K","slug":"tp-link-tapo-c200","vendor":"TP-Link","oem":null,"model":"Tapo C200","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Popular budget pan-tilt camera; firmware before 1.1.16 had an unauthenticated remote code execution flaw (CVE-2021-4045).","status":"confirmed","status_reason":"CVE-2021-4045; patched by TP-Link","status_at":1793853871563,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851853669,"updated_at":1793853871563,"url":"https://isitspying.com/p/tp-link-tapo-c200"},{"id":"01M6MYE22E5AJJJWHZ7QX4XFS0","slug":"reolink-e1-zoom","vendor":"Reolink","oem":null,"model":"E1 Zoom","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Pan-tilt indoor camera with an information-disclosure flaw in its web interface (CVE-2021-40150) in firmware before 3.0.0.716.","status":"confirmed","status_reason":"CVE-2021-40150; fixed in later firmware","status_at":1793853871214,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851852878,"updated_at":1793853871214,"url":"https://isitspying.com/p/reolink-e1-zoom"},{"id":"01M6MYE19YR16XYG0F23ENREDS","slug":"guardzilla-gz501w","vendor":"Guardzilla","oem":null,"model":"GZ501W","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Indoor security camera whose firmware embedded a shared, hard-coded Amazon S3 credential giving access to all users' stored video (CVE-2018-5560).","status":"confirmed","status_reason":"CVE-2018-5560 (Rapid7 / 0DayAllDay disclosure, Dec 2018)","status_at":1793853870909,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851852094,"updated_at":1793853870909,"url":"https://isitspying.com/p/guardzilla-gz501w"},{"id":"01M6MYE0CP8HJ6Y504NM6FWBZB","slug":"yi-technology-yi-home-camera-27us","vendor":"Yi Technology","oem":null,"model":"Yi Home Camera 27US","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Home camera in which Cisco Talos found multiple vulnerabilities in 2018, including code execution via crafted network traffic and the companion app.","status":"confirmed","status_reason":"Cisco Talos disclosure, October 2018","status_at":1793853870608,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851851158,"updated_at":1793853870608,"url":"https://isitspying.com/p/yi-technology-yi-home-camera-27us"},{"id":"01M6MYDZG6V768X00XBMZHZRRW","slug":"wyze-cam-v1","vendor":"Wyze","oem":null,"model":"Cam v1","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"First-generation Wyze Cam. Bitdefender disclosed an authentication bypass and a remote-code-execution flaw in 2022; v1 was never patched and reached end of life.","status":"confirmed","status_reason":"Bitdefender disclosure (2022); vendor did not patch v1","status_at":1793853870240,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851850246,"updated_at":1793853870240,"url":"https://isitspying.com/p/wyze-cam-v1"},{"id":"01M6MYDYZ6936RV21MMK4YEMN7","slug":"dahua-ipc-hx-nvr-series-cve-2021-33044-affected-firmware","vendor":"Dahua","oem":null,"model":"IPC-HX / NVR series (CVE-2021-33044 affected firmware)","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Dahua cameras and recorders with an authentication bypass in the loopback/NetKeyboard login flow.","status":"confirmed","status_reason":"CVE-2021-33044 / CVE-2021-33045 (CISA KEV)","status_at":1793853869870,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851849702,"updated_at":1793853869870,"url":"https://isitspying.com/p/dahua-ipc-hx-nvr-series-cve-2021-33044-affected-firmware"},{"id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","slug":"hikvision-ds-2cd2-series-firmware-before-sept-2021-fix","vendor":"Hikvision","oem":null,"model":"DS-2CD2 series (firmware before Sept 2021 fix)","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Network cameras affected by CVE-2021-36260, an unauthenticated command injection in the web server. In CISA's Known Exploited Vulnerabilities catalog.","status":"confirmed","status_reason":"CVE-2021-36260, in CISA's Known Exploited Vulnerabilities catalog","status_at":1793853869517,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851848509,"updated_at":1793853869517,"url":"https://isitspying.com/p/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix"}]}