CVE-2026-89175 — Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication

CVE-2026-89175

Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication PUBLISHED

Description (CNA)

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.

Affected (CNA)

Vendor / product	Versions
Kingdom Communication Associated / EH3040	affected 0 before 2.5.0A
Kingdom Communication Associated / EH4200	affected 0 before 2.5.0A
Kingdom Communication Associated / EH1000B	affected 0 before 2.7.0A
Kingdom Communication Associated / EH2070	affected 0 before 2.8.0A

CWE

CWE-602

References

https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html
https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.