Skip to content
OpenAdvisories
High · 8.7 CVE-2024-47790 EUVD-2024-42689GHSA-m5vg-qcpp-rq6f

Missing Authorization Vulnerability

Published Oct 4, 2024 · Updated Oct 14, 2024 · Assigned by CERT-In

Description

** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

VendorProductAffectedFixed
D3D Security IP Camera D8801 All versions —

References