Description (CNA)
Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Akuvox Company / Akuvox Smart Doorphone | affected S539; affected S532; affected X916; affected X915; affected X912 |
| The Akuvox Company / Akuvox Smart Intercom | affected R20K-2; affected R20A-2; affected C313W-2; affected NS-2; affected NC-2; affected NX-2 |
CWE
CWE-306
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5826.php
- https://packetstormsecurity.com/files/180262/
- https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-unauthenticated-video-stream-disclosure
ADP enrichment
No English description supplied.