Description
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Viewsonic | vCast | v0.0.0 – ≤ v3.2.715 | — |