Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gw2-m37j-rx57

Опубликовано: 23 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

EPSS

Процентиль: 12%
0.00042
Низкий

7.5 High

CVSS3

Дефекты

CWE-359

Связанные уязвимости

CVSS3: 7.5
nvd
около 2 месяцев назад

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

EPSS

Процентиль: 12%
0.00042
Низкий

7.5 High

CVSS3

Дефекты

CWE-359