← CVE Intelligence

CVE-2026-100293

Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5 PUBLISHED

Description (CNA)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the device will accept as valid.

Affected (CNA)

Vendor / productVersions
Anjvision / YSSD-RTMP-H5affected Version 3.3.2.4 build 2024-12-26

CWE

CWE-347

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.