The Silent Spy Among Us: Smart Intercom Attacks

Team82 (Claroty) analyzed an Akuvox E11 smart intercom firmware and device, uncovering 13 vulnerabilities that enable local and remote code execution, unauthenticated access to live camera and microphone streams, exposure and enumeration of user images on an insecure FTP server, and SIP-based activation of devices across accounts; the report includes firmware reverse-engineering, emulation, proof-of-concept exploits, CVE mappings, evidence of approximately 5,000 internet-exposed devices, and recommended mitigations while documenting failed disclosure attempts to the vendor.