The vulnerability allows an attacker who can physically reach the device to connect to its open network service without authentication. Once connected, the attacker can access the camera’s private interface and retrieve live video and audio streams, effectively stealing sensitive surveillance data. This flaw stems from incorrect access control mechanisms and is classified as a credential‑less data capture.

Browser devices manufactured by BS Producten, specifically the Petcam 33.1.0.0818 firmware build, are susceptible. The vulnerability applies only to this exact version; no other versions are currently known to be affected.

The CVSS base score of 6.5 indicates moderate severity. Although the EPSS score is unavailable, the requirement for physical proximity and open‐network access limits broader exploitation. The issue is not listed in the CISA Known Exploited Vulnerabilities catalog, suggesting no publicly confirmed exploits. Still, the risk of immediate unauthorized data access remains significant for anyone in the device’s vicinity.