Executive brief
The Trueview TI8161 security camera transmits MQTT messages in unencrypted plaintext over TCP port 1883. An attacker on the same network segment can intercept this traffic to obtain sensitive device information, operational commands, and authentication-related parameters without any credentials or decryption, potentially enabling follow-up attacks or unauthorized device control.
Technical details
The vulnerability is a lack of transport-layer encryption (TLS) on MQTT communications. The root cause is that the TI8161 camera transmits MQTT protocol messages over unencrypted TCP on port 1883. Attack vector is adjacent network access—an attacker capable of monitoring traffic on the same network segment can passively intercept these communications. The JSON payloads contain device identifiers, metadata, authentication parameters, and operational commands in human-readable plaintext. No authentication is required from the attacker; only network visibility is needed. This exposes sensitive operational data and may provide information to facilitate further attacks on the device or related infrastructure. A patch enabling TLS encryption for MQTT connections would mitigate this issue.
Affected products
- Trueview TI8161 6.0.23.4
Timeline
- 2026-09-04: disclosed