The MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n fails to implement nonce expiration in its RTSP Digest authentication. This flaw enables an attacker on the adjacent network to capture a legitimate authentication exchange and replay the nonce and response values in a new connection. By doing so, the attacker can bypass authentication controls without knowledge of the device credentials and gain unauthorized access to the live video stream. The vulnerability is classified under CWE-294 (Improper Authentication) and has a CVSS v3.1 base score of 9.1, indicating critical impact on confidentiality and integrity.

An attacker on the adjacent network can bypass authentication by replaying captured nonce and response values, gaining unauthorized access to the live video stream of the affected IP camera. This compromises the confidentiality and integrity of the video feed, potentially exposing sensitive surveillance data. There is no indication of impact on availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting network access to trusted devices and isolating the camera on a secure network segment may reduce risk.