Approved changes feed: RSS · Atom
cpe:2.3:a:softish:c6_ear_camera:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | softish (6f1c81bc-618e-5c99-8340-1a8e19574431) |
|---|---|
| Product | c6 ear camera (93667fcc-41d8-54fb-aa56-fbe67c4b840b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | — |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-82563 |
vulnerable | 2026-09-16 04:32:53.722905 |
Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing
HIGH (7.6)
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.
Published: 2026-09-09T15:36:46.987Z
Updated: 2026-09-09T19:13:34.554Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81330 |
vulnerable | 2026-09-16 04:32:48.421910 |
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
MEDIUM (6.5)
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.
Published: 2026-09-09T15:33:18.094Z
Updated: 2026-09-09T19:15:41.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81640 |
vulnerable | 2026-09-16 04:32:48.309345 |
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
HIGH (8.8)
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality.
Published: 2026-09-09T15:40:07.387Z
Updated: 2026-09-09T19:12:29.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77974 |
vulnerable | 2026-09-16 04:32:40.548150 |
Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function
HIGH (8)
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
Published: 2026-09-09T15:41:54.162Z
Updated: 2026-09-09T19:09:20.744Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.