PT-2021-9029 · Sannce · Sannce Smart Hd Wifi Security Camera

CVE-2019-20464

·

Published

2021-04-02

·

Updated

2024-11-10

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 (affected versions not specified)
Description An issue was discovered in the Sannce Smart HD Wifi Security Camera, where the device offers multiple streaming services. Although the service used by the mobile application requires a password, other streaming services do not. By initiating communication on the RTSP port, an attacker can obtain access to the video feed without authenticating.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2019-20464

Affected Products

Sannce Smart Hd Wifi Security Camera