CVE-2026-85083
The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially resulting in complete device compromise.
Scoring
- Severity
- HIGH
- CVSS base score
- 7
- CVSS vector
- CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.29%
- CWE
- CWE-798
- Published
- 2026-09-11
- Last modified
- 2026-09-11
Affected products
- CareCam ANJIA AJL33PC0801 Firmware
Weakness type
Related vulnerabilities
- CVE-2026-22769 — Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. Thi
- CVE-2026-27507 — Binardat 10G08-0800GSM Network Switch Hard-coded Credentials
- CVE-2026-25803 — 3DP-MANAGER Uses Hard-coded Credentials
- CVE-2026-25202 — The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo
- CVE-2026-24448 — Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administr
- CVE-2026-23647 — Glory RBG-100 Recycler System Hard-coded OS Credentials
- CVE-2025-9497 — Hardcoded Upgrade Decryption Passwords
- CVE-2020-37135 — AMSS++ 4.7 - Backdoor Admin Account