Trueview T18061 EUVD-2026-60550

Exploitation requires possession of the device's hard-coded RSA private key (CWE-321), which is recoverable because it is embedded in the Trueview T18061 firmware Version 1.0 and likely identical across units. The description limits the attacker position to 'physically proximate,' implying adjacent-network or physical/wireless proximity to the target camera rather than arbitrary internet access - this contradicts the supplied AV:N vector and is the primary limiting factor. Further limits: the attack targets this specific camera model/firmware, and the attacker must reach the RSA-protected service that consumes the key; no user interaction or prior authentication is required per the CVSS PR:N/UI:N metrics.

Signals conflict and must be reconciled. The supplied CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, base 9.1) rates this as remote, unauthenticated, low-complexity with high confidentiality and integrity impact - Critical. However, the human-readable description explicitly states a 'physically proximate attacker,' which implies adjacent/local access (AV:A), not network reach - verify with vendor, as this materially lowers real-world exposure. No EPSS score, KEV listing, POC confirmation, or SSVC decision data was provided, so exploitation probability cannot be quantified. Given that this is an obscure IoT camera with no active-exploitation evidence, the practical priority is moderate despite the high CVSS: a hard-coded RSA key is a genuine, systemic weakness, but the proximity requirement and niche footprint argue for targeted rather than widespread abuse.

An attacker within wireless/physical proximity of the camera extracts the hard-coded RSA private key from firmware (or reuses a key already published for this model) and uses it to authenticate to the device's protected management or streaming interface, escalating from unauthenticated observer to a privileged role. With the private key, the attacker can impersonate the camera, decrypt or tamper with its secured sessions, and pivot to view or manipulate the video feed. No public exploit is identified, but the attack requires only the shared key and proximity, keeping complexity low.