Skip to content
OpenAdvisories

Product · Tattile s.r.l.

Basic MK2

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.7

    Tattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration

    Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration. An attacker who obtains a valid token (for example via interception, log exposure, or token reus…

  • High 8.7

    Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure

    Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resultin…