Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xc77-54wc-w9q7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.

EPSS

Процентиль: 45%
0.00222
Низкий

Связанные уязвимости

CVSS3: 8.1
nvd
больше 5 лет назад

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.

CVSS3: 8.1
fstec
больше 5 лет назад

Уязвимость микропрограммного обеспечения Wi-Fi камер Rubetek RV-3406, RV-3409 и RV-3411, связанная с отсутствием защиты передаваемых данных, позволяющая нарушителю перехватить и изменить видеоданные с камеры

EPSS

Процентиль: 45%
0.00222
Низкий