Three Advisories, One Root Cause: CISA Flags Hardcoded and Default Credentials in Office IoT
On a single day, CISA published advisories for a smart doorbell and camera platform, a line of network cameras, and a connected outdoor robot. The CVEs differ; the root cause does not. Hardcoded cryptographic keys, default passwords, and credentials served up to anyone who asks โ across devices that quietly accumulate on office networks, two of them with no patch coming.