CVE-2026-89174 — Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection

CVE-2026-89174

Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection PUBLISHED

Description (CNA)

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.

Affected (CNA)

Vendor / product	Versions
Kingdom Communication Associated / EH3040	affected 0 before 2.5.0A
Kingdom Communication Associated / EH4200	affected 0 before 2.5.0A
Kingdom Communication Associated / EH1000B	affected 0 before 2.7.0A
Kingdom Communication Associated / EH2070	affected 0 before 2.8.0A

CWE

CWE-307

References

https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html
https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.