Anjvision YSSD-RTMP-H5
CISA warns Anjvision YSSD-RTMP-H5 firmware has nine flaws, including unauthenticated access and command injection.
61
CVE-2026-100299
Weak DES password hash on Anjvision YSSD-RTMP-H5 console
- CVSS 4.0
- 7.0 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Anjvision YSSD-RTMP-H5 firmware 3.3.2.4 keeps a legacy password hash on the serial console that is protected only by weak DES-based encryption (CWE-1391). An attacker who already has physical access and low privileges can target that hash on the console; recovering the credential can fully compromise the device's confidentiality, integrity, and availability. Published scoring shows high impact on the device itself, no impact on subsequent systems, and a physical rather than network attack path. Only firmware 3.3.2.4 is identified as affected. The issue is not in CISA KEV and no public proof-of-concept is known.
What to do: Restrict physical access to Anjvision YSSD-RTMP-H5 units and their serial consoles, and treat the legacy console credential as compromised until it is replaced or disabled. Apply any firmware update or mitigation published by Anjvision or the CISA ICS advisory for this issue; no fixed version is identified in the available data.
| Product | Affected |
|---|---|
| Anjvision YSSD-RTMP-H5 | firmware 3.3.2.4 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption.
- Weakness
- CWE-1391
- Vector
- CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X