Description
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kingdom Communication Associated | EH3040 | < 2.5.0A | 2.5.0A |
| Kingdom Communication Associated | EH4200 | < 2.5.0A | 2.5.0A |
| Kingdom Communication Associated | EH1000B | < 2.7.0A | 2.7.0A |
| Kingdom Communication Associated | EH2070 | < 2.8.0A | 2.8.0A |
References
- https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html third-party-advisory