CVEvulnerability

CVE-2025-70962

7.5 HIGH Published 2026-08-05 Modified 2026-10-13 Official page ↗
Status
Deferred
Published
2026-08-05
Last modified
2026-10-13
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-284

Description

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage.

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References