ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-25747

—
CVSS 3.1
9.4 critical
EPSS
2%p78
Published
()
Modified
Description

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings (brightness, clarity, time), restart the camera, or reset it to factory settings.

Vendors
rubetek
Products
rv-3406 firmware, rv-3409 firmware, rv-3411 firmware
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news

No ingested article mentions this CVE yet.