CareCam Pro IP Cameras

An attacker with physical access to the camera or who can intercept its network traffic could extract hardcoded credentials and gain full control of the device, potentially disabling surveillance or manipulating recorded footage in sensitive facilities.

Water authorities, municipal utilities, and any facility relying on ANJIA AJL33PC0801 IP cameras (branded as CareCam Pro) for surveillance of physical infrastructure, control rooms, or pump stations. This includes any camera used for monitoring critical operational areas where footage integrity or availability is important for security or forensics.

The device contains hardcoded credentials (CWE-798). An attacker who gains access to the device firmware—either through physical access to extract it or by intercepting unencrypted network communications—can obtain these credentials and use them to authenticate as an administrator, gaining full control over the camera's operation and recordings.