Wanjiaan Intelligent Technology Camera Exposure (QSee/CLink/XZL)
March 26th 2025
Cameras manufactured by Wanjiaan Intelligent Technology and sold under various lables of
QSee / CLink / ZXL / Yamazen exposing thier image and video URLs on an unsecured MQTT Server.
WJA has been aware of this situation since early 2024, when a full disclosue with details was made.
Models Affected:
- C01-Q3M01
- Clink_Q45
- M-E1M01
- M-E1M01A
- M04-E1M04
- Q2-w
- Q20
- Q41
- Q55
- Qsee_Q43
- Qsee_Q45
- Qsee_Q99
- Qsee_T2
- W5-W
- WJA-Q45
- XZL-Q1
- XZL-Q33
- XZL-Q41
- XZL-Q45
- XZL-Q55
How to reproduce (AKA. see for yourself)
- install / use any open-source MQTT client and subscribe to the "+" topic on the
wmq-na.wjacloud.com server
mosquitto_sub -h wmq-na.wjacloud.com -t "+"
DISCLAIMER: All the images linked to in this site, are NOT hosted locally, they are
linked to in thier original locations as exposed by WJA cloud servers
Contact Me