Securelist Denial-of-Service Vulnerability in Intelbras Cameras Affects Millions
Article Content
- •A denial-of-service vulnerability affects millions of Intelbras IP cameras.
- •The flaw allows devices to be taken offline via unauthenticated requests on local networks.
- •Intelbras has released a patch; users should update their firmware immediately.
Kaspersky's Global Research and Analysis Team (GReAT) identified a denial-of-service vulnerability in Intelbras IP camera systems, impacting millions of devices, primarily in Latin America. The flaw allows unauthorized users on the local Wi-Fi network to send requests that can knock cameras offline temporarily or indefinitely. The vulnerable firmware has been downloaded over 4 million times, affecting models including iM3B-C, iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC. Intelbras has released a patch and updated firmware to address the issue, which was classified as a Medium severity vulnerability with a CVSS score of 5.1. Users are advised to check their firmware versions and update to the latest release to mitigate risks. The vulnerability was reported to Intelbras, which responded promptly to remediate the issue.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
Which camera models are affected?
What should users do?
Is the vulnerability actively exploited?
Continue Reading
China-Linked Hackers Exploit PHP2Shell to Root 25 Servers Cybersecurity firm Dream reported that a China-linked threat actor exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a Linux kernel privilege escalation flaw (CVE-2026-46300) to gain root access to 25 servers, including three in a U.S. government-affiliated environment. The attackers used…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…