PT-2024-34606 · Lsc · Lsc Smart Connect Indoor Ip Camera

Patrick Kuin + 2 · Published 2024-11-05 · Updated 2024-11-06 · CVE-2024-51362

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LSC Smart Connect Indoor IP Camera version 7.6.32

Description The issue allows unauthorized access to live camera footage through the RTSP protocol on port 8554 without requiring authentication, potentially compromising user privacy and security. No credentials or special permissions are required, and access can be gained remotely over the network.

Recommendations For version 7.6.32, consider restricting access to port 8554 to minimize the risk of exploitation, and avoid using the RTSP protocol until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-51362

Affected Products

Lsc Smart Connect Indoor Ip Camera

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-51362 · Security Note
• https://twitter.com/CVEnew/status/1853853208923590970 · Twitter Post
• https://shinxyy.github.io/blogs/CVE_2024_51362.html · Note
• https://t.me/cvedetector/9899 · Telegram Post