CVE-2021-26627CWE-284

EDrhyme QCP 200W Information Exposure Vulnerability

High · published April 19, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01433 · 72.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-04-19T20:26Z
EPSS history
Timeline
  • 19 APR 20:26Z
    EDrhyme QCP 200W Information Exposure Vulnerability
    cvelistv5