Anjvision YSSD-RTMP-H5
CISA warns Anjvision YSSD-RTMP-H5 firmware has nine flaws, including unauthenticated access and command injection.
CISA advisory ICSA-26-272-05 covers Anjvision YSSD-RTMP-H5 firmware 3.3.2.4_build_2024-12-26 and nine CVEs, CVE-2026-100291 through CVE-2026-100299. CVE-2026-100291 lets unauthenticated attackers reach ONVIF management endpoints and is scored CVSS 9.8. Other issues include command injection, unverified firmware updates, hardcoded cloud credentials, debug interfaces, and an authenticated reset of the administrator password. Exploitation could expose data, run OS commands, or fully control the device; the notice does not report in-the-wild use.
- Firmware 3.3.2.4_build_2024-12-26 is affected.
- CVE-2026-100291 allows unauthenticated ONVIF access, CVSS 9.8.
- Flaws include command injection, unsigned updates, and hardcoded credentials.
- An empty POST can reset the administrator password to default.
- Devices are deployed worldwide; the vendor is based in China.
- CVEs
- CVE-2026-100291CVE-2026-100292CVE-2026-100293CVE-2026-100294CVE-2026-100295CVE-2026-100296CVE-2026-100297CVE-2026-100298CVE-2026-100299
- Vendors
- Anjvision
- Products
- YSSD-RTMP-H5
- Organizations
- CISA
- Countries
- China
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-100291 | Missing ONVIF authentication in Anjvision YSSD-RTMP-H5 | 9.3 group max | — |
From the original article
5 min read at cisa.govView CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device. The following versions of Anjvision YSSD-RTMP-H5 are affected: YSSD-RTMP-H5 firmware 3. 3.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.