CVEvulnerability

CVE-2024-58336

8.7 HIGH Published 2025-12-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-12-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-306

Description

Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.

Affected configurations

• akuvox s539 firmware 912.30.1.137 • akuvox s532 firmware 912.30.1.137 • akuvox x916 firmware 912.30.1.137 • akuvox x915 firmware 912.30.1.137 • akuvox x912 firmware 912.30.1.137 • akuvox r29 firmware 912.30.1.137 • akuvox r20k-2 firmware 912.30.1.137 • akuvox r20a-2 firmware 912.30.1.137 • akuvox c313w-2 firmware 912.30.1.137 • akuvox ns-2 firmware 912.30.1.137 • akuvox nc-2 firmware 912.30.1.137 • akuvox nx-2 firmware 912.30.1.137

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References