Guangzhou Juan IoT Technology EseeCloud
Critical vulnerabilities in Guangzhou Juan IoT Technology's EseeCloud App and firmware allow attackers to gain control
Run Guangzhou Juan IoT Technology Co., Ltd.?
Get an email when a reviewed story names Guangzhou Juan IoT Technology Co., Ltd., usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Multiple critical vulnerabilities have been identified in Guangzhou Juan IoT Technology's EseeCloud App and firmware, affecting versions up to 4.9.6 for the app and 4.9.86.0 for the firmware. These flaws, including hard-coded credentials and improper modification controls, could allow attackers to gain full control over affected IP cameras. The company did not respond to CISA's coordination attempts, leaving users advised to contact the vendor directly for support.
The lesson from this incident
Full lessonEseeCloud IP cameras manufactured by Guangzhou Juan IoT Technology contain hard-coded credentials and improper modification controls, meaning attackers who discover these static credentials can gain full control of affected devices with no additional effort. Hard-coded credentials are a fundamental design flaw that cannot be mitigated by end users changing passwords, since the credentials are embedded directly in firmware. The vendor's failure to respond to CISA's coordinated disclosure attempts compounds the risk, leaving potentially millions of users with no official patch or mitigation path. This case highlights the broader danger of IoT devices shipped with insecure-by-design configurations, where the attack surface is invisible to the average consumer.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
- cve — CVE-2026-107617
- cve — CVE-2026-97858
- cve — CVE-2026-105664