CVE-2019-25248highCWE-306

CVE-2019-25248: high-severity vulnerability in Beward N100 H.264 VGA IP Camera

Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure

Published

Follow this CVE+ Monitor N100 H.264 VGA IP Camera

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve the camera's RTSP stream by exploiting the lack of authentication in the video access mechanism.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Beward · N100 H.264 VGA IP Camera