PT-2021-9029 · Sannce · Sannce Smart Hd Wifi Security Camera

Published 2021-04-02 · Updated 2024-11-10 · CVE-2019-20464

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 (affected versions not specified)

Description An issue was discovered in the Sannce Smart HD Wifi Security Camera, where the device offers multiple streaming services. Although the service used by the mobile application requires a password, other streaming services do not. By initiating communication on the RTSP port, an attacker can obtain access to the video feed without authenticating.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-20464

Affected Products

Sannce Smart Hd Wifi Security Camera

References · 6

• 🔥 https://eurofins-cybersecurity.com/news/connected-devices-baby-monitors-part-2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-20464 · Security Note
• https://t.me/cvenotify/12534 · Telegram Post
• https://twitter.com/transilienceai/status/1855476770465575315 · Twitter Post
• http://seclists.org/fulldisclosure/2024/Jul/14 · Note
• https://twitter.com/transilienceai/status/1855476681722511417 · Twitter Post