Trueview Security camera T18161‑AF firmware version 4.9.60.0 validates supplied credentials against hard‑coded values and performs only superficial password checks. This flaw permits an attacker who knows or guesses a hard‑coded credential to gain full control of the device without possessing the legitimate user password. The vulnerability is a classic authentication bypass (CWE‑287) and is aggravated by the presence of hard‑coded credentials (CWE‑798).

The only product explicitly identified in the CVE record is a Trueview Security camera model T18161‑AF running firmware 4.9.60.0. No other vendors, product models, or firmware revisions are listed, indicating that impacts are known only for this specific firmware version unless later releases are updated.

The CVSS score of 9.8 categorizes this flaw as critical. While the EPSS score is under 1 %, indicating that exploitation events are currently rare, the vulnerability can be triggered remotely through any network-facing interface that performs the flawed credential check. Because the camera accepts hard‑coded credentials, an attacker who discovers or guesses such a credential can bypass authentication entirely. Successful exploitation grants the attacker unrestricted control over the camera, enabling configuration changes, firmware upgrades, or data extraction. The flaw is documented as CWE‑287 and CWE‑798, and it is not presently listed in the CISA KEV catalog.