CVE-2026-61514
Received Received - Intake

Authentication Bypass in Puwell IP Camera Firmware

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulnCheck

Description
Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field in the proprietary control protocol header to access live video streams, control pan and tilt motors, activate audio functions, and remotely restart the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-61514
EUVD
EUVD-2026-52690

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
puwell ip_camera From 2.x (inc) to 4.x (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Puwell IP Camera firmware versions 2.x through 4.x has an authentication bypass flaw allowing unauthenticated attackers to access device functions via TCP port 23456. The vulnerability stems from unvalidated Session fields in the proprietary control protocol header, enabling attackers to bypass authentication and perform actions like accessing live video, controlling camera movements, activating audio, and restarting the device.

Detection Guidance

Check if TCP port 23456 is open on Puwell IP Cameras by using network scanning tools like nmap. Run: nmap -p 23456 <target_IP>. If the port is open, test unauthenticated access by sending protocol-conforming packets to the port. Use tools like netcat or custom scripts to send properly formatted packets and observe responses.

Impact Analysis

This vulnerability allows attackers to remotely access live video feeds, control camera movements (pan/tilt), activate audio, and restart devices without authentication. It poses significant privacy risks, unauthorized surveillance, and potential physical security breaches if cameras are used for monitoring sensitive areas.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR (data protection) and HIPAA (privacy and security) by enabling unauthorized access to sensitive video and audio data. Organizations using affected cameras may face legal penalties, data breach notifications, and reputational damage due to inadequate security controls.

Mitigation Strategies

Immediately block TCP port 23456 at the network firewall to prevent external access. Update Puwell IP Camera firmware to the latest version if an update is available. Isolate affected devices from critical networks until patched. Monitor network traffic for suspicious activity targeting port 23456.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-61514. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart