CVE-2021-26627
EDrhyme QCP 200W Information Exposure Vulnerability
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
19 Apr 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
EDrhyme Co.,Ltd · QCP 200WWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →