Description (CNA)
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ubia / Ubox Android | affected 0 before January 15, 2026 |
| Ubia / Ubox IOS | affected 0 before January 15, 2026 |
CWE
CWE-522
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-02
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-310-02.json
ADP enrichment
No English description supplied.
No references supplied.