An exploitation path exists in the Trueview T18061 WiFi 3MP Robot Pan‑Tilt Security Camera that allows a physically proximate attacker to leverage an exposed RSA private key component to elevate privileges on the device. The vulnerability permits the attacker to gain higher‑level access, potentially controlling camera settings, capturing data, or using the device as a foothold for further network attacks. The weakness stems from insufficient protection or validation of the private key, enabling privilege escalation without any remote input from the network.

The affected product is the Trueview T18061 WiFi 3MP Robot Pan‑Tilt Security Camera running firmware version 1.0. No other vendor or product versions are reported as affected at this time.

Exploitability requires close physical proximity to the camera, which limits the attack surface but still poses a significant risk to owners situating the device in accessible locations. EPSS is not available and the vulnerability is not listed in the CISA KEV catalog, however the lack of a publicly released fix means that operators must rely on manual mitigations. An attacker with access could immediately gain privileged control, underscoring a high-security impact for exposed installations.