CVE-2024-58336

🗓️ 30 Dec 2025 22:41:44Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

Unauthenticated access to live video streams on Akuvox S539 via video.cgi on port 8080.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-58336	31 Dec 202521:03	–	circl
CNNVD	Akuvox S539 访问控制错误漏洞	30 Dec 202500:00	–	cnnvd
Cvelist	CVE-2024-58336 Akuvox Smart Intercom S539 Unauthenticated Video Stream Disclosure	30 Dec 202522:41	–	cvelist
EUVD	EUVD-2024-55372	31 Dec 202500:31	–	euvd
NVD	CVE-2024-58336	30 Dec 202523:15	–	nvd
OSV	CVE-2024-58336	30 Dec 202523:15	–	osv
Positive Technologies	PT-2025-54256	30 Dec 202500:00	–	ptsecurity
Vulnrichment	CVE-2024-58336 Akuvox Smart Intercom S539 Unauthenticated Video Stream Disclosure	30 Dec 202522:41	–	vulnrichment
Zero Science Lab	Akuvox Smart Intercom/Doorphone Unauthenticated Stream Disclosure	20 Aug 202400:00	–	zeroscience

NVD

Vulners

Node

akuvox s539_firmwareMatch912.30.1.137

AND

akuvox s539Match-

Node

akuvox s532_firmwareMatch912.30.1.137

AND

akuvox s532Match-

Node

akuvox x916_firmwareMatch912.30.1.137

AND

akuvox x916Match-

Node

akuvox x915_firmwareMatch912.30.1.137

AND

akuvox x915Match-

Node

akuvox x912_firmwareMatch912.30.1.137

AND

akuvox x912Match-

Node

akuvox r29_firmwareMatch912.30.1.137

AND

akuvox r29Match-

Node

akuvox r20k-2_firmwareMatch912.30.1.137

AND

akuvox r20k-2Match-

Node

akuvox r20a-2_firmwareMatch912.30.1.137

AND

akuvox r20a-2Match-

Node

akuvox c313w-2_firmwareMatch912.30.1.137

AND

akuvox c313w-2Match-

Node

akuvox ns-2_firmwareMatch912.30.1.137

AND

akuvox ns-2Match-

Node

akuvox nc-2_firmwareMatch912.30.1.137

AND

akuvox nc-2Match-

Node

akuvox nx-2_firmwareMatch912.30.1.137

AND

akuvox nx-2Match-

[
  {
    "vendor": "The Akuvox Company",
    "product": "Akuvox Smart Doorphone",
    "versions": [
      {
        "version": "S539",
        "status": "affected"
      },
      {
        "version": "S532",
        "status": "affected"
      },
      {
        "version": "X916",
        "status": "affected"
      },
      {
        "version": "X915",
        "status": "affected"
      },
      {
        "version": "X912",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "The Akuvox Company",
    "product": "Akuvox Smart Intercom",
    "versions": [
      {
        "version": "R20K-2",
        "status": "affected"
      },
      {
        "version": "R20A-2",
        "status": "affected"
      },
      {
        "version": "C313W-2",
        "status": "affected"
      },
      {
        "version": "NS-2",
        "status": "affected"
      },
      {
        "version": "NC-2",
        "status": "affected"
      },
      {
        "version": "NX-2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5826.php
packetstormsecurity	www.packetstormsecurity.com/files/180262/
vulncheck	www.vulncheck.com/advisories/akuvox-smart-intercom-s-unauthenticated-video-stream-disclosure

Parameter	Position	Path	Description	CWE
video.cgi	path	192.168.1.2:8080/video.cgi	Unauthenticated access to live video stream via video.cgi on port 8080.	CWE-306

17 Jun 2026 08:14Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.3

CVSS 48.7

EPSS0.00349

SSVC

CWE-306