CVE-2022-24610: Alecto Dvc-215ip Firmware

High severity, CVSS 8.6. EPSS: 1% chance of exploitation in the next 30 days.

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera.

Affected products

• Alecto Dvc-215ip Firmware: from 63.1.1.137, before 63.1.1.173 (fixed in 63.1.1.173)

Published 2022-02-24. Last modified 2026-06-17.