Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/01/13 10:52 p.m.•12 views

CVE-2025-66049

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

8.7CVSS6.2AI score0.00416EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/09 12:15 p.m.•25 views

CVE-2025-66049

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

8.7CVSS0.00416EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/09 12:15 p.m.•9 views

CVE-2025-66049

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/09 11:53 a.m.•45 views

CVE-2025-66049 Unprotected RTSP stream in Vivotek IP7137 cameras

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

8.7CVSS0.00416EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/09 11:53 a.m.•48 views

CVE-2025-66049

Affected product: Vivotek IP7137 camera with firmware 0200a. Vulnerabilities: (1) information disclosure via RTSP on port 8554 without authentication, exposing live feed; (2) command injection via /cgi-bin/admin/setparam.cgi with parameter system_ntpIt, exploitable by an admin user; (3) path trav...

8.7CVSS5.9AI score0.00416EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/09 11:53 a.m.•5 views

CVE-2025-66049 Unprotected RTSP stream in Vivotek IP7137 cameras

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

8.7CVSS5.9AI score0.00416EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•1 views

CVE-2025-66049: Missing Authentication for Critical Function

Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

8.7CVSS7.1AI score0.00416EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/05 12:00 a.m.•10 views

PT-2024-34606 · Lsc · Lsc Smart Connect Indoor Ip Camera

Name of the Vulnerable Software and Affected Versions: LSC Smart Connect Indoor IP Camera version 7.6.32 Description: The issue allows unauthorized access to live camera footage through the RTSP protocol on port 8554 without requiring authentication, potentially compromising user privacy and...

6.5CVSS6.9AI score0.00299EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/11/05 12:00 a.m.•40 views

CVE-2024-51362

The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•2 views

CVE-2024-51362: Missing Authentication for Critical Function

The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

6.5CVSS5.8AI score0.00299EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/05 12:00 a.m.•67 views

CVE-2024-51362

The LSC Smart Connect Indoor IP Camera (version V7.6.32 ) is susceptible to an information disclosure vulnerability. The root cause is an unauthenticated RTSP service running on port 8554 , which allows unauthorized users with network access to view live camera footage remotely. This exposure can...

6.5AI score0.00299EPSS
SaveExploits0References1
Rows per page
Query Builder