PT-2022-9776 · Edrhyme Co.+1 · Qcp 200W+1

Published 2022-04-19 · Updated 2022-04-27 · CVE-2021-26627

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue is related to real-time image information exposure due to insufficient authentication for the activated RTSP port. This could allow remote attackers to send RTSP requests, potentially using the ffplay command, and lead to the leakage of live images.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Improper Authentication

Weakness Enumeration

CWE-284

CWE-287

Related Identifiers

CVE-2021-26627

Affected Products

Qcp 200W

Qcp200W Firmware

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2021-26627 · Security Note
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663 · Note