Description (CNA)
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Viewsonic / vCast | affected v0.0.0 through v3.2.715 |
CWE
No CWE identifiers supplied.