Vulnerability in Carecam Anjia Ajl33pc0801 Firmware
CVE-2026-85083
The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially resulting in complete device compromise.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Carecam Anjia Ajl33pc0801 Firmware — versions linux_linux_202008261138_svn13796 / Bootloader U-Boot 2010.06 (compiled 2020-08-26)
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-85083?
- CVE-2026-85083 is a medium-severity vulnerability in Carecam Anjia Ajl33pc0801 Firmware, classified under Use of Hard-coded Credentials. CVSS score: 6.8/10. Published 2026-09-11.
- How severe is CVE-2026-85083?
- Medium severity. CVSS v3 base score is 6.8 out of 10.