The original Wyze Cam reportedly has a big security hole

Wyze’s primary and not too long ago discontinued Cam v1 suffers from a flaw that lets attackers to view the contents of the camera’s SD card, according to stability scientists.

Cybersecurity business Bitdefender (by way of BleepingComputer) has printed a white paper detailing the safety hole, which allows hackers entry the primary Wyze Cam’s SD card by exploiting a webserver vulnerability.

The bug was very first claimed again in March 2019, Bleeping Pc reports, and Wyze ultimately patched the stability hole for the Wyze Cam v2 and v3 just two months ago. But the flaw remains unpatched in the authentic Wyze Cam, which Wyze “retired” on February 1.

Notably, Wyze stated that it was discontinuing the Wyze Cam v1 mainly because it “can no longer help a necessary security update.” 

Wyze added that whilst consumers of the initial Wyze Cam, which will obtain no long term protection patches, would nonetheless be ready to use the camera, doing so “carries enhanced possibility, is discouraged by Wyze and is solely at your possess danger.”

It is not distinct if the “necessary protection update” that Wyze was referring to was the patch that Wyze produced for the SD card flaw in January. We have arrived at out to Wyze for remark.

As BleepingComputer notes, the SD card on a Wyze Cam suppliers a assortment of information outside of recorded movie footage, like the device’s log files and UUID (universally special identifier range).

In a blanket suggestion, Bitdefender claims that good residence end users should really “keep a shut eye on IoT devices” as well as “isolate them as substantially as feasible from the neighborhood or guest community.”

But provided what seems to be a quite really serious stability vulnerability that will probable never ever be patched, consumers of the Wyze Cam v1 really should probably go ahead and toss their obsolete cameras in the e-cycle bin.