Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints without authentication.
| Software | From | Fixed in |
|---|---|---|
| simicam / ip_camera_firmware | 1.16.41 | 1.16.41.x |
| keview / ip_camera_firmware | 1.14.92 | 1.14.92.x |
| asecam / ip_camera_firmware | 1.14.10 | 1.14.10.x |