CVE-2024-42531

Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets with a specific…

Critical · published August 23, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

🚨 A crafty RTSP packet can let anyone peek into your Ezviz camera feed! 😱 It's like leaving your front window open, giving anyone walking by a clear view of what's happening inside your living room. If attackers figure out how to craft the right URL, they could redirect your camera feed however they like! An unauthenticated intruder could gain access to your live video stream, potentially spying on your home or business. This could lead to absolutely devastating privacy breaches, where sensitive moments could be captured without your knowledge. 🔥

Put simply

It's like leaving your front window open, giving anyone walking by a clear view of what's happening inside your living room. If attackers figure out how to craft the right URL, they could redirect your camera feed however they like! This vulnerability allows an unauthenticated host to access the live video stream of the Ezviz Internet PT Camera by sending crafted RTSP packets with specific URLs, enabling unauthorized viewing of the camera feed.

What to do

An unauthenticated intruder could gain access to your live video stream, potentially spying on your home or business. This could lead to absolutely devastating privacy breaches, where sensitive moments could be captured without your knowledge. 🔥 Immediately patch your camera firmware to the latest version provided by the vendor. Additionally, consider changing any default access credentials and review your network settings to ensure unauthorized users can’t intercept RTSP communications. 🛡️ You've got this! By taking these steps, you can secure your camera and protect your privacy! 🔐

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00572 · 46.6th percentile
Published
2024-08-23T00:00Z
EPSS history
Timeline
  • 23 AUG 00:00Z
    Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets with a specific…
    cvelistv5