CVE-2026-9274

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obtain sensitive information, including cryptographic private keys, Wi-Fi credentials and configuration data stored in RAM of the targeted device. Successful exploitation of this vulnerability could allow unauthorized access to encrypted communications and connected wireless network of the targeted device.

CVSS

No CVSS.

References

Link	Resource
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0266

Configurations

No configuration.

History

23 Jul 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Esta vulnerabilidad existe en la Cámara Wi-Fi CP Plus debido a una protección inadecuada de información sensible en la memoria en tiempo de ejecución. Un atacante con acceso físico podría explotar esta vulnerabilidad al acceder a la interfaz UART y realizar una extracción de memoria para obtener información sensible, incluyendo claves privadas criptográficas, credenciales de Wi-Fi y datos de configuración almacenados en la RAM del dispositivo objetivo. La explotación exitosa de esta vulnerabilidad podría permitir el acceso no autorizado a comunicaciones cifradas y a la red inalámbrica conectada del dispositivo objetivo.

25 May 2026, 10:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-25 10:16

Updated : 2026-07-23 11:10

NVD link : CVE-2026-9274

Mitre link : CVE-2026-9274

CVE.ORG link : CVE-2026-9274

JSON object : View

Products Affected

No product.

CWE

CWE-312

Cleartext Storage of Sensitive Information

{"id": "CVE-2026-9274", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9274", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T14:34:46.327904Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "vdisclose@cert-in.org.in", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.2, "Automatable": "NOT_DEFINED", "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "vdisclose@cert-in.org.in", "affectedData": [{"vendor": "CP Plus", "product": "Wi-Fi Camera CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q, CP-Z45Q", "versions": [{"status": "affected", "version": "v02.21.031 or below"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-25T10:16:15.627", "references": [{"url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0266", "source": "vdisclose@cert-in.org.in"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "vdisclose@cert-in.org.in", "description": [{"lang": "en", "value": "CWE-312"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obtain sensitive information, including cryptographic private keys, Wi-Fi credentials and configuration data stored in RAM of the targeted device. \n\n\n\nSuccessful exploitation of this vulnerability could allow unauthorized access to encrypted communications and connected wireless network of the targeted device."}, {"lang": "es", "value": "Esta vulnerabilidad existe en la C\u00e1mara Wi-Fi CP Plus debido a una protecci\u00f3n inadecuada de informaci\u00f3n sensible en la memoria en tiempo de ejecuci\u00f3n. Un atacante con acceso f\u00edsico podr\u00eda explotar esta vulnerabilidad al acceder a la interfaz UART y realizar una extracci\u00f3n de memoria para obtener informaci\u00f3n sensible, incluyendo claves privadas criptogr\u00e1ficas, credenciales de Wi-Fi y datos de configuraci\u00f3n almacenados en la RAM del dispositivo objetivo.\n\nLa explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda permitir el acceso no autorizado a comunicaciones cifradas y a la red inal\u00e1mbrica conectada del dispositivo objetivo."}], "lastModified": "2026-07-23T11:10:00.120", "sourceIdentifier": "vdisclose@cert-in.org.in"}