CVE-2021-26627
Summary
| CVE | CVE-2021-26627 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-19 21:15:00 UTC |
| Updated | 2022-04-27 18:10:00 UTC |
| Description | Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qcp | Qcp200w | - | All | All | All |
| Operating System | Qcp | Qcp200w Firmware | - | All | All | All |
| Operating System | Qcp | Qcp200w Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory | KrCERT/CC - KISA 인터넷 보호나라&KrCERT | MISC | www.krcert.or.kr | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.