Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7838-283v-mwh7

Опубликовано: 22 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1

Описание

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior.

The vendor did not respond in any way. Only version 11.100001.01.28 was tested, other versions might also be vulnerable.

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior.

The vendor did not respond in any way. Only version 11.100001.01.28 was tested, other versions might also be vulnerable.

EPSS

Процентиль: 5%
0.00023
Низкий

7.1 High

CVSS4

Дефекты

CWE-306

Связанные уязвимости

nvd
23 дня назад

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only version 11.100001.01.28 was tested, other versions might also be vulnerable.

EPSS

Процентиль: 5%
0.00023
Низкий

7.1 High

CVSS4

Дефекты

CWE-306