{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/im3b-c/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["iM3B-C","iMX C","iM4 C","iM5 SC","iME 360 C","iM7+ FC"],"_cs_severities":["medium"],"_cs_tags":["denial-of-service","iot","network"],"_cs_type":"advisory","_cs_vendors":["Intelbras"],"content_html":"\u003cp\u003eResearchers discovered a denial-of-service vulnerability affecting several Intelbras IP camera models. The vulnerability exists in the firmware upgrade service endpoint, which lacks authentication and input validation. An attacker with access to the local Wi-Fi network can send requests to this endpoint to force the camera into a reboot cycle. Periodic requests can keep the affected device offline indefinitely. Intelbras has released a firmware update (R.260804) to remediate the vulnerability. MITRE has assigned the candidate ID CAN-2026-2035970 to this issue.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker gains access to the local Wi-Fi network where the target camera is connected.\u003c/li\u003e\n\u003cli\u003eAttacker identifies the camera IP address on the local network.\u003c/li\u003e\n\u003cli\u003eAttacker targets the unauthenticated endpoint '/firmwareUpgrade_service/Demo'.\u003c/li\u003e\n\u003cli\u003eAttacker sends a specially crafted request to the firmware upgrade service.\u003c/li\u003e\n\u003cli\u003eThe camera initiates a firmware upgrade process without validating the request or firmware integrity.\u003c/li\u003e\n\u003cli\u003eThe camera enters a reboot state, causing it to lose connection to the user and the mobile application.\u003c/li\u003e\n\u003cli\u003eAttacker repeats the request periodically to prevent the camera from staying online, resulting in indefinite denial of service.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows any unauthorized user on the local Wi-Fi network to perform a denial-of-service attack, rendering the security camera offline and ineffective.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpdate all affected Intelbras cameras to the latest firmware version (R.260804) immediately.\u003c/li\u003e\n\u003cli\u003eIsolate security cameras on a dedicated, non-broadcast VLAN to prevent unauthorized local network access.\u003c/li\u003e\n\u003cli\u003eImplement network-level monitoring to detect unusual traffic directed at device management ports.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-28T11:38:28Z","date_published":"2026-10-28T11:38:28Z","id":"https://feed.craftedsignal.io/briefs/2026-10-intelbras-dos/","summary":"An unauthenticated denial-of-service vulnerability in Intelbras IP cameras allows local network attackers to trigger infinite reboots via the firmware upgrade endpoint.","title":"Intelbras IP Camera Denial-of-Service Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-10-intelbras-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - IM3B-C","version":"https://jsonfeed.org/version/1.1"}