CVE-2019-20464

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices

High · published April 2, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a password, the other streaming services do not. By initiating communication on the RTSP port, an attacker can obtain access to the video feed without authenticating.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01668 · 76.6th percentile
Published
2021-04-02T15:32Z
EPSS history
Timeline
  • 02 APR 15:32Z
    An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices
    cvelistv5