CVE-2024-51362: LSC Smart Connect Indoor IP Camera · Missing Authentication
Source CVE Database V5
Not known to be exploited · CVSS 6.5 Medium.
Data as of 26 Oct 2026, 17:16 UTC
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 22% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 5 Nov 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Immediately restrict network access to the RTSP port (8554) by implementing firewall rules that limit connections to trusted IP addresses or internal networks only.
- Segment the network to isolate IoT devices like IP cameras from general user and internet-facing networks to reduce exposure.
- Monitor network traffic for unusual or unauthorized RTSP connection attempts to detect potential exploitation.
- Disable RTSP streaming if not required or replace it with a more secure streaming protocol that enforces authentication.
- 6. Consider deploying network intrusion detection/prevention systems (IDS/IPS) with signatures for unauthorized RTSP access. 7. Educate staff on the risks of exposed IoT devices and enforce strong network security policies. 8. If possible, configure the camera or network equipment to require authentication for RTSP streams, even if this requires custom configuration or vendor support.
Description
The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed, potentially compromising user privacy and security. No credentials or special permissions are required, and access can be gained remotely over the network.