Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2019-25236

iSeeQ Hybrid DVR WH-H4 1.03R Unauthenticated Live Stream Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/get_jpeg endpoint without authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

iSeeQ Hybrid DVR WH-H4

  • 1.03Raffected
  • 2.0.0.Paffected

References