Skip to content
OpenAdvisories
High · 7.5 CVE-2019-20464 EUVD-2019-11009GHSA-4fww-6347-xmwg

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to st…

Published Apr 2, 2021 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a password, the other streaming services do not. By initiating communication on the RTSP port, an attacker can obtain access to the video feed without authenticating.

References