Description
A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shenzhen Liandian Communication Technology | V380 IP Camera / AppFHE1_V1.0.6.0 | AppFHE1_V1.0.6.020230803 | — |