Q Bee · Qbee Cam · CVE-2018-16225
**Name of the Vulnerable Software and Affected Versions**
Q Bee MultiSensor Camera versions 4.16.4 and earlier
Q Bee Cam application versions 1.0.5 and earlier for Android
Swisscom Home application versions 10.7.2 and earlier for Android
**Description**
The issue allows an attacker to reuse cookies and bypass authentication, potentially disabling the camera, by accepting unencrypted network traffic from clients.
**Recommendations**
For QBee MultiSensor Camera versions 4.16.4 and earlier, update to a version that encrypts network traffic to prevent cookie reuse.
For QBee Cam application versions 1.0.5 and earlier for Android, update to a version that uses encrypted communication with the camera.
For Swisscom Home application versions 10.7.2 and earlier for Android, update to a version that supports secure connections to the camera.