PT-2015-7756 · Rsi Video Technologies · Videofied

Andrew Tierney · Published 2015-12-27 · Updated 2015-12-28 · CVE-2015-8253

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RSI Video Technologies Videofied devices using the Frontel protocol version prior to 3

Description The issue allows remote attackers to obtain sensitive message or MJPEG video data by sniffing the network, as the Frontel protocol sets up AES encryption but sends all traffic in cleartext.

Recommendations For versions prior to 3, update the Frontel protocol to version 3 or later to ensure encrypted traffic.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-8253

Affected Products

Videofied

References · 3

• 🔥 http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-8253 · Security Note
• https://kb.cert.org/vuls/id/792004 · Note