Svakom develops internet-connected smart device firmware, specifically the Siime Eye camera line, which presents a concentrated but security-sensitive attack surface given the device's role in home surveillance and the persistent nature of embedded firmware deployments. The vendor's vulnerabilities skew toward serious outcomes and cluster around insecure cryptographic defaults, cleartext credential storage, OS command injection, and cross-site request forgery issues that are characteristic of resource-constrained embedded systems with inadequate input validation and credential handling. Defenders should prioritize inventory and isolation of affected devices, as firmware update availability and user adoption rates for consumer smart devices often lag behind disclosure; live severity and current exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Svakom over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-11919HIGH An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection. | Nov 7, 2024 | 8.0 | 25 | NO | NO |
CVE-2020-11920CRITICAL An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver | Feb 8, 2021 | 9.8 | 25 | NO | NO |
CVE-2020-11916MEDIUM An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecate | Nov 7, 2024 | 6.3 | 21 | NO | NO |
CVE-2020-11918MEDIUM An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created through the web interface, information on all users, including passwords, can be fo | Nov 7, 2024 | 5.4 | 20 | NO | NO |
CVE-2020-11915MEDIUM An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable t | Feb 8, 2021 | 6.8 | 18 | NO | NO |
CVE-2020-11917MEDIUM An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier for remote attackers to discover the physical locations of ma | Nov 7, 2024 | 4.3 | 17 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Svakom.
Media articles that mention a CVE ID that affects a product developed by Svakom — matched by CVE ID, not by vendor name.