Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-9983

Lack of Authentication for RTSP stream

Description

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only version 11.100001.01.28 was tested, other versions might also be vulnerable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GALAYOU G2

Default version status: unknown

  • 11.100001.01.28affected

References