Intelbras IP Camera Denial-of-Service Vulnerability

Researchers discovered a denial-of-service vulnerability affecting several Intelbras IP camera models. The vulnerability exists in the firmware upgrade service endpoint, which lacks authentication and input validation. An attacker with access to the local Wi-Fi network can send requests to this endpoint to force the camera into a reboot cycle. Periodic requests can keep the affected device offline indefinitely. Intelbras has released a firmware update (R.260804) to remediate the vulnerability. MITRE has assigned the candidate ID CAN-2026-2035970 to this issue.

Attack Chain

1. Attacker gains access to the local Wi-Fi network where the target camera is connected.
2. Attacker identifies the camera IP address on the local network.
3. Attacker targets the unauthenticated endpoint '/firmwareUpgrade_service/Demo'.
4. Attacker sends a specially crafted request to the firmware upgrade service.
5. The camera initiates a firmware upgrade process without validating the request or firmware integrity.
6. The camera enters a reboot state, causing it to lose connection to the user and the mobile application.
7. Attacker repeats the request periodically to prevent the camera from staying online, resulting in indefinite denial of service.

Impact

The vulnerability allows any unauthorized user on the local Wi-Fi network to perform a denial-of-service attack, rendering the security camera offline and ineffective.

Recommendation

1. Update all affected Intelbras cameras to the latest firmware version (R.260804) immediately.
2. Isolate security cameras on a dedicated, non-broadcast VLAN to prevent unauthorized local network access.
3. Implement network-level monitoring to detect unusual traffic directed at device management ports.