Executive brief
A security vulnerability in Blurams Flare smart cameras allows an individual with physical access to the device to bypass security controls during the startup process. By manipulating the device's internal hardware components, an attacker can gain full control over the camera's software. This could lead to the theft of sensitive data, including encryption keys and private user configuration settings, potentially compromising the privacy and security of the camera's video feed.
Technical details
The vulnerability is classified as improper access control for volatile memory containing boot code (CWE-1274). A physically proximate attacker can interrupt the standard boot sequence by shorting a data pin of the SPI flash memory IC to ground, inducing a read error. This hardware fault allows the attacker to drop into a bootloader shell accessible via the UART interface. Once shell access is obtained, the attacker can dump the device's entire firmware, leading to the extraction of sensitive information such as cryptographic keys and user-specific configurations. The issue is addressed in firmware version 25.1119.177.2341.
Affected products
- Blurams Dome Flare Camera firmware up to and including 24.1114.151.929
Timeline
- 2025-09-23: other: First contacted with vendor
- 2025-10-08: other: Vulnerability report submitted to vendor
- 2025-10-11: other: Vulnerabilities confirmed by vendor
- 2025-11-29: other: CVE IDs Reserved
- 2026-01-14: advisory: Public disclosure and NVD publication