Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-100291

Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.

Affected versions

  • Anjvision YSSD-RTMP-H5

    Version 3.3.2.4 build 2024-12-26

References 1

cisa.gov