EUVD-2026-76002
GHSA-jhv8-rq8g-hhm5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable interface, no credentials required, scope unchanged; only partial configuration disclosure with no integrity or availability impact.
Primary rating from Vendor (twcert).
CVSS VectorVendor: twcert
Lifecycle Timeline
2DescriptionCVE.org
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
AnalysisAI
Client-side authentication bypass in Kingdom Communication Associated's Smart Video Intercom System (models EH3040, EH4200, EH1000B, EH2070) exposes configuration data to unauthenticated remote attackers. The authentication gate is enforced only in client-side code rather than on the server, allowing direct traversal to restricted pages without supplying credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The intercom's embedded web management interface must be reachable over the network by the attacker - either via WAN exposure or LAN/VLAN adjacency. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N) scores 6.9, reflecting unauthenticated remote access with limited confidentiality impact and no integrity or availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation path is a firmware update from Kingdom Communication Associated addressing server-side session validation; however, no specific patched firmware version number is provided in the available data - consult the TWCERT advisory at https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html and contact the vendor directly for patch availability. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Missing brute-force protection in Kingdom Communication Associated's Smart Video Intercom System (models EH3040, EH4200,
User account enumeration via observable response discrepancy (CWE-204) affects Kingdom Communication Associated's Smart
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today