Wanjiaan Intelligent Technology Camera Exposure (QSee/CLink/XZL)

March 26th 2025
Cameras manufactured by Wanjiaan Intelligent Technology and sold under various lables of QSee / CLink / ZXL / Yamazen exposing thier image and video URLs on an unsecured MQTT Server. WJA has been aware of this situation since early 2024, when a full disclosue with details was made.
Models Affected:
  • C01-Q3M01
  • Clink_Q45
  • M-E1M01
  • M-E1M01A
  • M04-E1M04
  • Q2-w
  • Q20
  • Q41
  • Q55
  • Qsee_Q43
  • Qsee_Q45
  • Qsee_Q99
  • Qsee_T2
  • W5-W
  • WJA-Q45
  • XZL-Q1
  • XZL-Q33
  • XZL-Q41
  • XZL-Q45
  • XZL-Q55
How to reproduce (AKA. see for yourself)

- install / use any open-source MQTT client and subscribe to the "+" topic on the wmq-na.wjacloud.com server
mosquitto_sub -h wmq-na.wjacloud.com -t "+"
DISCLAIMER: All the images linked to in this site, are NOT hosted locally, they are linked to in thier original locations as exposed by WJA cloud servers

Contact Me