Lucene search
K

BEWARD N100 H.264 VGA IP Camera M2.1.6 Unauthenticated RTSP Stream Disclosure

🗓️ 04 Feb 2019 00:00:00Reported by Gjoko KrsticType 
zeroscience
 zeroscience
🔗 www.zeroscience.mk👁 69 Views

BEWARD N100 H.264 VGA IP Camera M2.1.6 Unauthenticated RTSP Stream Disclosure. Vulnerability allows unauthorized access to live video stream

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2019-25248
24 Dec 202521:48
circl
CNNVD
Beward N100 安全漏洞
24 Dec 202500:00
cnnvd
CVE
CVE-2019-25248
24 Dec 202519:28
cve
Cvelist
CVE-2019-25248 Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure
24 Dec 202519:28
cvelist
EUVD
EUVD-2025-205322
24 Dec 202521:30
euvd
NVD
CVE-2019-25248
24 Dec 202520:15
nvd
Positive Technologies
PT-2025-53334
24 Dec 202500:00
ptsecurity
Vulnrichment
CVE-2019-25248 Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure
24 Dec 202519:28
vulnrichment
<html><body><p>BEWARD N100 H.264 VGA IP Camera M2.1.6 Unauthenticated RTSP Stream Disclosure


Vendor: Beward R&amp;D Co., Ltd
Product web page: https://www.beward.net
Affected version: M2.1.6.04C014

Summary: The N100 compact color IP camera with support for a more efficient
compression format is optimized for low-speed networks, thanks to which it
transmits a real-time image over the network with minimal delays. The camera
supports the switching of the broadcast modes, and in the event of a break in
communication with the remote file storage, it can continue recording to the
microSDHC memory card. N100 is easy to install and configure, has all the
necessary arsenal for the organization of low-cost professional video surveillance
systems.

Desc: BEWARD N100 camera suffers from an unauthenticated and unauthorized
live RTSP video stream access.

Tested on: Boa/0.94.14rc21
           Farady ARM Linux 2.6


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2019-5509
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5509.php


26.01.2019

--


http://TARGET/cgi-bin/view/image
</p></body></html>

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Feb 2019 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.17.5
CVSS 48.7
EPSS0.0013
SSVC
69