Path Traversal Vulnerability in AJCloud AJY IPC Firmware

AJCloud AJY IPC firmware versions prior to 01.10715.11.37 contain a path traversal vulnerability in the jdbhttpd web service. This flaw enables unauthenticated remote attackers to bypass access controls and read arbitrary files on the underlying file system with root privileges. By injecting path traversal sequences into HTTP requests directed at port 80, an adversary can retrieve sensitive system files. The exposure includes credentials for RTSP streams, Wi-Fi network SSID and pre-shared keys, device serial numbers, and cloud binding parameters. This vulnerability represents a significant risk for the confidentiality of device configurations and network access credentials, potentially facilitating lateral movement or further exploitation within the connected environment.

Impact

Successful exploitation allows for the unauthorized extraction of sensitive configuration data, including Wi-Fi security keys and RTSP credentials. These data points provide an attacker with the ability to gain network access or intercept video streams from the affected cameras. The scope of targeting includes all deployments of AJY IPC devices running firmware versions earlier than 01.10715.11.37.

Recommendation

Update the firmware for all AJCloud AJY IPC devices to version 01.10715.11.37 or later immediately to address CVE-2026-56718. For environments where patching cannot occur immediately, restrict access to the web management interface on port 80 to trusted management subnets using network segmentation or firewall ACLs.