ICAM365 CCTV Camera Multiple Models

Summary

Vulnerabilities 2

• Medium 6.8
  CVE-2025-62674

  Missing Authentication for RTSP in iCam Cameras

  The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an attacker unauthorized access to camera configuration information.

  iCam365 P201 QC021
  Nov 20, 2025
• Medium 6.8
  CVE-2025-64770

  Missing Authentication for ONVIF in iCam Cameras

  The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may allow an attacker unauthorized access to camera configuration information.

  iCam365 QC021 P201
  Nov 20, 2025

Revision history

1. 2025-11-20 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-324-02 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-02
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
• Recommended Practices
  https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
• Recommended Practices
  https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
• Recommended Practices
  https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks