Authentication flaw

2017-07-0222:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admin@yourip:554/h264_hd.sdp URL.

CPENameOperatorVersion
nc250_firmwarele1.2.1

CPE	Name	Operator	Version
	nc250_firmware	le	1.2.1

References

gist.github.com/elbauldelgeek/8f0f24c582f43f51a34b34420a385d75