CVE-2020-25747

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV…

published September 25, 2020

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

🚨 A simple connection is all it takes for an attacker to peek through the eyes of your Rubetek cameras! 🔥 It's like leaving a window wide open and inviting anyone to come in, adjust your blinds, and even change the color of your living room paint without you knowing! This vulnerability lets attackers access your camera feeds, control the camera's movements, adjust settings, or even reset it completely. Imagine someone watching your live streams or altering your camera settings without any barriers – not a great thought, right?

Put simply

It's like leaving a window wide open and inviting anyone to come in, adjust your blinds, and even change the color of your living room paint without you knowing! The Telnet service in Rubetek RV-3406, RV-3409, and RV-3411 cameras allows remote attackers to access RTSP and ONVIF services without authentication, granting them inappropriate control over the camera.

What to do

This vulnerability lets attackers access your camera feeds, control the camera's movements, adjust settings, or even reset it completely. Imagine someone watching your live streams or altering your camera settings without any barriers – not a great thought, right? To protect your cameras, make sure to update them to the latest firmware available. Additionally, disable the Telnet service if it's not needed and ensure strong network security practices are in place to limit access. 🛡️ You've got this! With these steps, you can secure your cameras and keep prying eyes at bay! 😄

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01848 · 78.9th percentile
Published
2020-09-25T03:15Z
EPSS history
Timeline
  • 25 SEP 03:15Z
    The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV…
    cvelistv5