OTPulse

Eufy Omni C20, Omni X10 Pro

Plan PatchCVSS 9.4ICS-CERT ICSA-26-267-02Sep 24, 2026
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Multiple vulnerabilities in Eufy Omni X10 Pro and Omni C20 cameras versions prior to 1.6.4 allow remote code execution with system-level privileges. The vulnerabilities include OS command injection (CWE-78), hardcoded credentials (CWE-798), and improper certificate validation (CWE-295). Successful exploitation requires only network access and no authentication.

What this means
What could happen
An attacker with network access could run arbitrary commands on these surveillance cameras with system-level privileges, potentially compromising the camera itself, accessing stored footage, or using it as a pivot point into your network.
Who's at risk
Security teams and facility managers responsible for Eufy Omni X10 Pro and Omni C20 surveillance cameras deployed in physical security roles at water utilities, power plants, substations, or other critical infrastructure sites.
How it could be exploited
An attacker sends a specially crafted network request to the camera's management interface. The camera fails to properly validate input or authenticate the request, allowing the attacker to execute arbitrary system commands with elevated privileges. No user interaction is required.
Prerequisites
  • Network reachability to the camera's management port (typically port 22, 443, or proprietary port)
  • No authentication required
remotely exploitableno authentication requiredlow complexityhigh CVSS score (9.4)affects security/surveillance systems
Exploitability
Unlikely to be exploited — EPSS score 0.7%
Affected products (2)
2 pending
ProductAffected VersionsFix Status
Omni X10 Pro<1.6.4No fix yet
Omni C20<1.6.4No fix yet
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

Omni X10 Pro
HOTFIXUpdate both Omni C20 and Omni X10 Pro cameras to firmware version 1.6.4 or later
View full CISA ICS-CERT advisory
API: /api/v1/advisories/e6c62724-7f90-4602-8cb7-28a56b9c69c8

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.