{"id":"CVE-2021-26627","state":"PUBLISHED","title":"EDrhyme QCP 200W Information Exposure Vulnerability","description":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.","publishedAt":"2022-04-19T20:26:29.000Z","updatedAt":"2024-08-03T20:26:25.482Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"krcert"},"assigner":"krcert","products":["EDrhyme Co.,Ltd QCP 200W"],"affected":[{"vendor":"EDrhyme Co.,Ltd","product":"QCP 200W","versions":[{"version":"No version information","status":"affected"}],"platforms":["Windows, Android"]}],"references":["https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T19:48:13.210Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/26xxx/CVE-2021-26627.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-26627","state":"PUBLISHED","datePublished":"2022-04-19T20:26:29.000Z","dateUpdated":"2024-08-03T20:26:25.482Z","assignerShortName":"krcert","assignerOrgId":"cdd7a122-0fae-4202-8d86-14efbacc2863","dateReserved":"2021-02-03T00:00:00.000Z"},"containers":{"cna":{"title":"EDrhyme QCP 200W Information Exposure Vulnerability","descriptions":[{"lang":"en","value":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image."}],"affected":[{"vendor":"EDrhyme Co.,Ltd","product":"QCP 200W","versions":[{"version":"No version information","status":"affected"}],"platforms":["Windows, Android"]}],"references":[{"url":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"krcert","dateUpdated":"2022-04-19T20:26:29.000Z","orgId":"cdd7a122-0fae-4202-8d86-14efbacc2863"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vuln@krcert.or.kr","ID":"CVE-2021-26627","STATE":"PUBLIC","TITLE":"EDrhyme QCP 200W Information Exposure Vulnerability"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"QCP 200W","version":{"version_data":[{"platform":"Windows, Android","version_affected":"=","version_name":"No version information","version_value":"No version information"}]}}]},"vendor_name":"EDrhyme Co.,Ltd"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-284 Improper Access Control"}]}]},"references":{"reference_data":[{"name":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663","refsource":"MISC","url":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663"}]},"source":{"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T20:26:25.482Z"}}]}}}