A critical authentication flaw in Blurams Flare Camera allows attackers with physical access to achieve full root-level command execution.

The vulnerability exists within the safe_exec.sh startup script, which fails to properly authenticate inputs when the /opt/images/public_key.der file is missing. An unauthenticated attacker with physical access can trigger this flaw by placing a maliciously crafted auth.ini file onto an SD card inserted into the device.

The ability to execute arbitrary commands with root privileges represents a total compromise of the affected device. Given the CVSS score of 8.4, this vulnerability poses a significant risk to organizational integrity and data privacy, as compromised cameras can be leveraged for lateral movement within a network or unauthorized surveillance.

Immediate Action: Since no specific patch version is currently identified, contact the vendor for official security guidance and firmware updates to address this startup script vulnerability.

Proactive Monitoring: Audit physical access to hardware devices and monitor system logs for unexpected execution of scripts or unauthorized file modifications in the /opt/ directory.

Compensating Controls: Restrict physical access to device SD card slots in sensitive environments and ensure that device deployments follow strict physical security protocols to prevent unauthorized hardware modification.

Public Exploit Available: Exploit_available (unknown).

This vulnerability presents a high risk due to the potential for full root-level compromise of the camera device. Organizations using Blurams Flare Camera should prioritize physical security and reach out to the manufacturer for remediation timelines. Ensure that all devices are updated as soon as a firmware patch becomes available to mitigate this critical risk.