CVE-2022-40785: Mipcm Mipc Camera Firmware

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This allows an attacker to gain remote code execution on cameras running the firmware when a victim logs into a specially crafted mobile app.

Affected products

• Mipcm Mipc Camera Firmware: version 5.3.1.2003161406 only

Published 2022-09-26. Last modified 2026-06-17.