CVE-2019-25248CWE-306

Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure

High · published December 24, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

🚨 Anyone can access live video streams with just a crafted URL! The Beward N100 camera lets remote attackers in without any credentials, making your privacy a major target. 🔥 Think of it like a coffee shop with no door — anyone can walk in and watch you sip lattes. In this case, the camera's RTSP stream is left wide open, allowing anyone to see what's happening live, with no security checks in place! This vulnerability could allow attackers to spy on private moments, gather sensitive information, or even plan physical break-ins by monitoring activities. The potential for invasion of privacy is absolutely devastating, and could lead to a loss of trust in your security systems!

Put simply

Think of it like a coffee shop with no door — anyone can walk in and watch you sip lattes. In this case, the camera's RTSP stream is left wide open, allowing anyone to see what's happening live, with no security checks in place! CVE-2019-25248 exposes the Beward N100 camera's RTSP stream due to a lack of authentication in its video access mechanism, allowing unauthorized access to the live feed without credentials.

What to do

This vulnerability could allow attackers to spy on private moments, gather sensitive information, or even plan physical break-ins by monitoring activities. The potential for invasion of privacy is absolutely devastating, and could lead to a loss of trust in your security systems! To close this significant security gap, update the Beward N100 firmware to the latest version as soon as possible. Additionally, review your camera settings to ensure proper authentication is enforced, and consider implementing a network firewall to restrict access. 🛡️ You've got this! Securing your camera is totally achievable with a little diligence and the right updates. Let's get to it! 💪😄

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00469 · 39.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-12-24T19:28Z
EPSS history
Timeline
  • 24 DEC 19:28Z
    Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure
    cvelistv5