CVE-2019-20464

2021-04-0215:32:59

mitre

github.com

sannce smart hd

wifi security camera

unauthenticated access

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

69.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a password, the other streaming services do not. By initiating communication on the RTSP port, an attacker can obtain access to the video feed without authenticating.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:sannce:smart_hd_wifi_security_camera_ean_2_950004_595317_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "sannce",
    "product": "smart_hd_wifi_security_camera_ean_2_950004_595317_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ],
    "defaultStatus": "unknown"
  }
]