EUVD-2026-37894
GHSA-4fqm-96mj-r77p
Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:C/RE:X/U:Red
Adjacent-only attack vector (AV:A) required per RTSP network access; no privileges or interaction needed; impact is confidentiality-only via unauthorized video stream retrieval.
Primary rating from Vendor (1c6b5737-9389-4011-8117-89fa251edfb2).
CVSS VectorVendor: 1c6b5737-9389-4011-8117-89fa251edfb2
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:C/RE:X/U:Red
Lifecycle Timeline
1DescriptionCVE.org
A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.
AnalysisAI
Unauthenticated live video stream access on the V380 IP Camera (firmware AppFHE1_V1.0.6.020230803, Shenzhen Liandian Communication Technology LTD) is achievable by any adjacent-network attacker who directly queries the RTSP media delivery endpoint, entirely bypassing the credential-enforced live-view authentication workflow. The root cause, CWE-306 (Missing Authentication for Critical Function), confirms that the RTSP pipeline lacks the authentication gate applied to the device's primary viewing interface - a structural authorization boundary failure rather than a logic bypass. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be positioned on the same adjacent network segment as the V380 camera (AV:A per CVSS 4.0) - this vulnerability is NOT exploitable from the internet without prior lateral movement or VPN/bridge access into the camera's LAN. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 6.0 with AV:A (Adjacent network) is the primary scope-limiting factor - this vulnerability is not remotely exploitable from the internet without prior network access, constraining the realistic attacker pool to LAN-adjacent actors, guests on shared Wi-Fi, or adversaries who have already achieved adjacent network presence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with access to the same Wi-Fi network or LAN segment as a deployed V380 camera uses a standard RTSP client (e.g., VLC, ffplay, or a custom script) to send a direct RTSP DESCRIBE or PLAY request to the camera's IP address on TCP port 554 without supplying any credentials. Because the RTSP pipeline performs no authentication check, the camera responds by opening the media stream and the attacker receives a real-time live video feed of whatever the camera monitors. … |
| Remediation | No vendor-released patch or official firmware update has been identified at time of analysis; the sole reference is a researcher's GitHub documentation with no associated vendor response or fix version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today