CVE-2018-13115

Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream

published October 22, 2018

CVSS
—
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01016 · 62.8th percentile
Published
2018-10-22T20:00Z
EPSS history
Timeline
  • 22 OCT 20:00Z
    Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream
    cvelistv5