Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anjvision | YSSD-RTMP-H5 | Version 3.3.2.4 build 2024-12-26 | — |
Advisories 1
- ICSA-26-272-05 Anjvision YSSD-RTMP-H5 CISA ICS & IT advisories · Sep 29, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05 government-resource