CVE-2024-47790

Description

** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote attacker could exploit this vulnerability by crafting a RTSP packet leading to unauthorized access to live feed of the targeted device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Reserved 2024-10-01 | Published 2024-10-04 | Updated 2024-10-14 | Assigner CERT-In

Problem types

CWE-862: Missing Authorization

Product status

Default status
unaffected

All versions
affected

Credits

This vulnerability is reported by Priyanka R. Chaudhary, BITS Pilani, Hyderabad. finder

References

www.cert-in.org.in/...eid=PUBVLNOTES01&VLCODE=CIVN-2024-0314 third-party-advisory

cve.org (CVE-2024-47790)

nvd.nist.gov (CVE-2024-47790)

Download JSON