CVE-2026-81305: CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent physical access to the CM2507 removable-media interface (e.g., lock down/remove access to the port or restrict physical access to the device) so an attacker cannot supply malicious scripts on removable media.
- Compensating control
Ensure removable-media scripts on CM2507 are only loaded after authenticity/integrity verification (disable automatic execution of predetermined scripts from removable media, or configure the system to verify signatures/checksums before execution).
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Deployments where an attacker can obtain physical access to a CareCam CM2507 camera are exposed. The attacker can use removable media to supply the script that the device executes.
What does an attacker need to exploit this issue?
The attacker needs physical access to the affected device and removable media containing a malicious script. No authentication or user interaction is identified as necessary.
What is the likely impact if exploitation succeeds?
A successful attacker can execute arbitrary code in the security context of the affected CareCam CM2507 device. The provided severity data indicates high impacts to confidentiality, integrity, and availability.