Vulnerabilidades do Softish C6 Ear Camera

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Softish C6 Ear Camera: 4 registro(s), com versões afetadas e correções.

CVE-2026-82563 Alta · 7.6 CWE-290 09/09/2026

Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.

CVE-2026-81640 Alta · 8.8 CWE-798 09/09/2026

Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality.

CVE-2026-81330 Média · 6.5 CWE-319 09/09/2026

Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.

CVE-2026-77974 Alta · 8.0 CWE-306 09/09/2026

Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.