CVE-2013-3689: Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models wit...

Security readout for executives and security teams

Some Brickcom IP camera firmware exposed a configuration dump that could reveal usernames, passwords, and device settings to a remote attacker. This matters because compromised camera credentials can enable surveillance access, lateral movement, or broader network reconnaissance, especially where cameras are internet-facing or on flat internal networks. Exposure is most likely in organizations still running legacy Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, or OSD-040E cameras with firmware 3.0.6.16C1 or earlier, especially if camera web interfaces are reachable from untrusted networks. Prioritize this for legacy surveillance environments and internet-exposed camera deployments. The business risk is credential disclosure from physical security infrastructure, not just camera downtime. If affected devices are isolated and updated or retired, urgency is lower. Mitigation focus: Inventory Brickcom cameras and identify firmware versions.; Check Brickcom or reseller guidance for supported fixed firmware.; Remove camera management interfaces from internet exposure..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.