CVE-2023-38027: Myspotcam Sense Firmware

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.

Affected products

• Myspotcam Sense Firmware: before 2.2046 (fixed in 2.2046)

Published 2023-08-28. Last modified 2026-06-17.