Softish C6 Ear Camera vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Softish C6 Ear Camera: 4 record(s), with affected versions and fixes.
CVE-2026-82563
High · 7.6
CWE-290 Sep 9, 2026
Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.
CVE-2026-81640
High · 8.8
CWE-798 Sep 9, 2026
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality.
CVE-2026-81330
Medium · 6.5
CWE-319 Sep 9, 2026
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.
CVE-2026-77974
High · 8.0
CWE-306 Sep 9, 2026
Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.