Anjvision YSSD-RTMP-H5
CISA warns Anjvision YSSD-RTMP-H5 firmware has nine flaws, including unauthenticated access and command injection.
61
Vulnerability1 · 1 read
CVE-2026-100297
Unauthenticated SSRF in Anjvision YSSD-RTMP-H5 firmware
- CVSS 4.0
- 6.9 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Firmware 3.3.2.4 of the Anjvision YSSD-RTMP-H5 includes an unauthenticated network-check function that is a server-side request forgery issue (CWE-918). A remote attacker who can reach the device can trigger that function so the device probes arbitrary hosts from its internal network. The probe can expose internal network information and leak data through DNS queries; CVSS 4.0 rates confidentiality impact as low, with no integrity or availability impact. Only this named firmware version is identified as affected. The issue is not listed in CISA KEV, and no public proof-of-concept is known.
What to do: Do not expose the YSSD-RTMP-H5 management or network-check interface to the internet or other untrusted networks; limit access with firewall rules and monitor the device for unexpected outbound connections or DNS queries. Contact Anjvision for a firmware update, since no fixed version is identified in the available advisory data.
| Product | Affected |
|---|---|
| Anjvision YSSD-RTMP-H5 | firmware 3.3.2.4 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.
- Weakness
- CWE-918
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X