Threat database

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a vulnerability due to the use of a legacy password hash on the serial console that relies on weak DES-based encryption. This weakness can lead to compromise of confidentiality, integrity, and availability of the device. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a vulnerability where two user-information endpoints expose sensitive device and account details under unintended conditions. This issue is classified as CWE-522, indicating insufficient protection of credentials. The vulnerability has a high severity with a CVSS score of 8.8, reflecting its potential to compromise confidentiality, integrity, and availability. No specific affected versions beyond 3.3.2.4 are stated, and no patch information is provided.

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler does not verify the session's privilege level, so any authenticated user can trigger it.

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains hardcoded cloud-API credentials shared across devices. These credentials are embedded in the public firmware package, allowing unauthorized users to interact with the cloud service beyond intended operations. This vulnerability is identified as CWE-798 and has a high severity rating with a CVSS score of 7.5.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 has a vulnerability where the update mechanisms, both local and cloud, do not perform cryptographic signature verification on new firmware. Instead, they rely solely on basic hashing, allowing an attacker with access to the update routine to install untrusted firmware. This flaw can lead to full compromise of the device's confidentiality, integrity, and availability.

CVE-2026-100292 is a high-severity OS command injection vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. It involves a hidden debug interface that can be enabled via an authenticated request, allowing additional commands to be sent to a backend service. This can expose system-level functionality that may be misused if crafted inputs reach the command handler.

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a critical vulnerability where several ONVIF service endpoints do not enforce required authentication. This allows unauthorized attackers to access sensitive device management operations. The vulnerability is identified as CWE-1188, involving insecure default initialization of resources. The CVSS score is 9.8, indicating a critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.