OTPulse

Guangzhou Juan IoT Technology EseeCloud

Plan PatchCVSS 9.8ICS-CERT ICSA-26-288-02Oct 15, 2026
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Guangzhou Juan IoT Technology EseeCloud contains multiple critical vulnerabilities affecting IP cameras. The vulnerabilities include hardcoded or default credentials (CWE-798), insecure direct object references allowing unauthorized access to camera functions (CWE-915), and missing security controls (CWE-204). Successful exploitation allows an attacker to gain complete control over affected IP cameras remotely. Affected versions are EseeCloud App version 4.9.6 and earlier, and EseeCloud Firmware version 4.9.86.0 and earlier. The vendor has not responded to coordination attempts and no patch has been released.

What this means
What could happen
An attacker could gain full control of EseeCloud IP cameras, potentially disabling surveillance, manipulating video feeds, or using compromised cameras as a pivot point to attack other systems on your network.
Who's at risk
Organizations using EseeCloud IP cameras for surveillance, including water utilities, electric utilities, and other municipal facilities. Affected are camera management installations running EseeCloud App version 4.9.6 or earlier and camera firmware version 4.9.86.0 or earlier.
How it could be exploited
An attacker on the network or with internet access to your EseeCloud deployment could exploit default credentials (CWE-798), insecure direct object references (CWE-915), or missing security controls (CWE-204) to authenticate and execute arbitrary commands on the camera firmware or management application, gaining administrative access.
Prerequisites
  • Network access to EseeCloud application port or management interface
  • EseeCloud App version 4.9.6 or earlier, or EseeCloud Firmware version 4.9.86.0 or earlier
  • No valid user credentials required (default or hardcoded credentials may be used)
remotely exploitableno authentication requiredlow complexityhigh CVSS score (9.8)no patch available from vendordefault credentials
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (2)
2 pending
ProductAffected VersionsFix Status
EseeCloud App≤ 4.9.6No fix yet
EseeCloud Firmware≤ 4.9.86.0No fix yet
Remediation & Mitigation
0/5
Do now
0/4
HOTFIXContact Guangzhou Juan IoT Technology Co., Ltd. at https://eseecloud.app/ to request available security patches or firmware updates beyond version 4.9.86.0
HARDENINGImmediately audit all EseeCloud devices on your network and document model, firmware version, and network location
WORKAROUNDRestrict network access to EseeCloud management interfaces to authorized workstations only using firewall rules or network segmentation
WORKAROUNDDisable or isolate EseeCloud devices that cannot be immediately patched until a vendor fix is available
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

EseeCloud App
HARDENINGMonitor EseeCloud application and camera logs for unauthorized access attempts or changes to camera settings
View full CISA ICS-CERT advisory
API: /api/v1/advisories/133e8510-7474-41ab-99c6-571a12a8cfdf

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.