| शीर्षक | Gwelltimes Technology Yoosee Smart Camera GM8135S 21.00.01.36 Insecure Default Initialization of Resource |
|---|
| विवरण | The Yoosee Smart Camera is shipped with an insecure default configuration that causes it to automatically connect to a set of predefined, open WiFi networks. The device's filesystem contains wpa_supplicantX.conf files configured with the SSIDs "Free-AP0", "Free-AP1", "Free-AP2", and "Free-AP3", all set to connect without a password.
An attacker in physical proximity to the camera can set up a malicious WiFi hotspot using one of these default SSIDs (e.g., "Free-AP0") with no password. The camera will then automatically connect to this rogue network. By combining this with a deauthentication attack against the camera's legitimate WiFi connection, an attacker can force the device to connect to their controlled network. |
|---|
| स्रोत | ⚠️ https://akosibrylle.me/writeups/yoosee-cve |
|---|
| उपयोगकर्ता | brylleee (UID 101717) |
|---|
| सबमिशन | 29/09/2026 05:21 AM (27 दिन पहले) |
|---|
| संयम | 25/10/2026 09:38 AM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 426183 [Yoosee GM8135S Camera 21.00.01.36 WiFi Configuration wpa_supplicantX.conf] |
|---|
| अंक | 20 |
|---|