Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-35902 EUVD-2026-25903GHSA-vfw9-c27q-5vqc

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedl…

Published Apr 27, 2026 · Updated Apr 28, 2026 · Assigned by mitre

Description

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication parameters, an unauthenticated attacker can cause the RTSP service to enter a persistent authentication failure state, preventing legitimate clients from authenticating and leading to a denial of service.

References