CVE-2026-100298

Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5 PUBLISHED

Description (CNA)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for normal operation.

Affected (CNA)

Vendor / product	Versions
Anjvision / YSSD-RTMP-H5	affected Version 3.3.2.4 build 2024-12-26

CWE

CWE-522

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.