Description
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication. A remote attacker can connect to the RTSP service and access live video/audio streams without valid credentials, resulting in unauthorized disclosure of surveillance data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Tattile s.r.l. Smart+
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Tolling+
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Smart+ Speed
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Smart+ Traffic Light
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Axle Counter
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Vega53
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Vega33
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Vega11
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. Basic MK2
Default version status: unaffected
0 to ≤ 1.181.5affected
Tattile s.r.l. ANPR Mobile
Default version status: unaffected
0 to ≤ 1.181.5affected