CVE-2017-10796

TP-Link NC250 network cameras (firmware up to 1.2.1 build 170515) are vulnerable to an authentication bypass that allows anyone to view video and audio via rtsp://admin@:554/h264_hd.sdp. The affected component is the authentication mechanism for RTSP video/audio streams; root cause not explicitly...