Industry News

Buggy Webcams, IP Cameras and Baby Monitors Reveal Too Much to Anyone

Some models of webcams, IP surveillance cameras and baby monitors from Chinese manufacturer Foscam have vulnerable firmware that permits anyone with access to the device’s Internet address to catch live streaming and even record videos.

Camera experts reported on the company’s support portal that many Foscam cameras can too easily be accessed by unauthorized persons with only the device’s Internet address at hand. They only need to hit “OK” in the dialog box that requires username and password, without having to fill in the log in data too, as long as the browser was not completely shut down after use.

The vulnerability is present in .54 version MJPEG cameras, models FI8904W, FI8905E, FI8905W, FI8906W, FI8907W, FI8909W, FI8910E, FI8910W, FI8916W, FI8918W, and FI8919W. The company announced an update version of the latest version of firmware- .55 – to be published on the company’s website by 25th of January.

Don Kennedy, a diligent member of the Foscam support forum posted a workaround for the bug to help users until Foscam issues the official fix. Kennedy warned users that this temporary patch can have a downside in that too many attempts to log in without credentials can make the camera freeze. Plus the .55 firmware update will not solve the freeze issue.

About the author


A blend of teacher and technical journalist with a pinch of e-threat analysis, Loredana Botezatu writes mostly about malware and spam. She believes that most errors happen between the keyboard and the chair. Loredana has been writing about the IT world and e-security for well over five years and has made a personal goal out of educating computer users about the ins and outs of the cybercrime ecosystem.

1 Comment

Click here to post a comment
  • Web cameras become the major threat to the web security. Just several days ago, the BBC reported an US web hosting company – OVH has been hit by the massive DDoS attack initiated by hundred thousands of web cameras. By the way, since many web cameras have the infrared illuminators to provide artificial illumination at night, I guess the intensive infrared light may hurt baby's eyes.