AnalysisPublished 2 Nov 2026

How a surveillance camera can be remotely disabled: the problem and the fix | Kaspersky official blog

Source Kaspersky Security Blog

mobile

Description

A vulnerability was discovered in Intelbras IP cameras that allowed remote disabling of the device by exploiting the firmware update process. The cameras did not require authentication or validate firmware files before updating, enabling anyone on the same Wi-Fi network to repeatedly trigger reboots and keep the camera offline indefinitely. This affects several Intelbras models sharing the same firmware. Intelbras has released a firmware update to fix this issue. Users are advised to update their firmware promptly and secure their home networks and devices to prevent exploitation.

Impact

Successful exploitation allows an attacker on the same Wi-Fi network to remotely disable affected Intelbras IP cameras by forcing continuous reboots through unauthenticated firmware update requests. This results in loss of video surveillance coverage, potentially enabling unauthorized physical access to monitored areas without detection. The impact is significant given the widespread use of these cameras in home and private settings.

Defensive guidance

Intelbras has released an official firmware update (R.260804) that fixes the vulnerability by requiring authentication and validating firmware files during updates. Users should update their cameras to this firmware version immediately. Additionally, securing the home network by changing default passwords, disabling WPS, using strong Wi-Fi passwords, isolating smart devices on separate networks, and enabling two-factor authentication on management accounts is recommended to reduce risk.

Summary

Intelbras IP cameras, including the iM3 C and other models using the same firmware, had a vulnerability in their firmware update mechanism. The cameras accepted update requests without authentication or firmware validation over the local network. An attacker connected to the same Wi-Fi network could send repeated update requests, causing the camera to reboot continuously and remain offline, effectively disabling surveillance. The vulnerability was confirmed on firmware version v240927. Intelbras issued a patched firmware release R.260804 to address this issue. The vulnerability is rated medium severity but has significant potential impact due to the large user base, primarily in Brazil and Latin America.

References

kaspersky.com/blog/intelbras-ip-cameras-vulnerability/56640/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 2 Nov 2026, 13:30 UTC

Technical details

References

Community reviews

Related threats