---
title: Tip: EseeCloud cameras have a 9.8 hard-coded login and no vendor fix — take them off the internet and segment them | ctxsec
url: https://ctxsec.com/items/tip-eseecloud-no-fix-isolate
description: ""
status: "tip"
published: 2026-10-15
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-eseecloud-no-fix-isolate.md)

tip

2026-10-15

### Tip: EseeCloud cameras have a 9.8 hard-coded login and no vendor fix — take them off the internet and segment them

For ICSA-26-288-02 (EseeCloud app 4.9.6 and earlier, firmware 4.9.86.0 and earlier), the vendor didn't respond to CISA, so there is no patch. Inventory these devices (often white-labeled NVR/IP cameras), block inbound access from the internet and from user VLANs, disable cloud/P2P features where you can, and plan replacement. For dcm4chee-arc-light, upgrade to 5.35.2 and keep its REST APIs off untrusted networks.

Sources: [CISA ICSA-26-288-02](https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02) · [CISA ICSMA-26-288-02](https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02)