CVEvulnerability

CVE-2018-13115

6.5 MEDIUM Published 2018-10-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20

Description

Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user.

Affected configurations

• keruigroup ypc99 firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References