CVE-2024-34896 describes a security flaw in the Nedis SmartLife Video Doorbell (model WIFICDP10GY) and its iOS application version 1.4.0. The vulnerability permits users who have lost connection to the device via a peer-to-peer link to retain access to the live video feed, potentially exposing sensitive video data. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No official patch or remediation guidance is currently documented.

Unauthorized users who were previously connected to the device can continue to view the live video feed even after disconnection, leading to a breach of confidentiality. There is no impact on integrity or availability reported. This could result in privacy violations and unauthorized surveillance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the device, monitoring connected users, or disabling remote access features if possible. No vendor advisory or official fix has been published at this time.