Unauthorized Access to vSolution Matrix RTSP
Summary
| CVE | CVE-2026-70379 |
|---|---|
| State | PUBLISHED |
| Assigner | ENISA |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-26 18:18:39 UTC |
| Updated | 2026-10-26 18:41:21 UTC |
| Description | When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled. |
Risk And Classification
Primary CVSS: v4.0 7.1 HIGH from a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Problem Types: CWE-319 | CWE-319 CWE-319 Cleartext transmission of sensitive information
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 | Secondary | 7.1 | HIGH | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/C... |
| 4.0 | CNA | CVSS | 7.1 | HIGH | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 3.1 | a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 | Secondary | 6.5 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | CNA | CVSS | 6.5 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
CVSS v4.0 Breakdown
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | WolfVision | Cynap Pro Cynap Core Pro | affected 1.78a custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| wolfvision.com/de/security/cve-2026-70379-1 | a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 | wolfvision.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: National Test Institute for Cybersecurity (NTC) (en)
Additional Advisory Data
Workarounds
CNA: Until an update can be applied, consider the following measures where operationally feasible: * Disable the "vSolution Matrix" feature if it is not required. * Restrict vSolution Matrix to networks that contain only trusted Matrix stations. If network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554. * Outbound audio and video multicast from the device: UDP 5500-5503 by default. * On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream. * If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7. WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.