An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private.

Project Subscriptions

Vendors Products
Jtechdigital Subscribe
H.264 Iptv Encoder 1080p\@60hz Subscribe
H.264 Iptv Encoder 1080p\@60hz Firmware Subscribe
Provideoinstruments Subscribe
Vecaster-4k-hevc Subscribe
Vecaster-4k-hevc Firmware Subscribe
Vecaster-hd-h264 Subscribe
Vecaster-hd-h264 Firmware Subscribe
Vecaster-hd-hevc Subscribe
Vecaster-hd-hevc Firmware Subscribe
Vecaster-hd-sdi Subscribe
Vecaster-hd-sdi Firmware Subscribe
Iptv\/h.264 Video Encoder Firmware Subscribe
Iptv\/h.265 Video Encoder Firmware Subscribe
Uaioe264-1u Subscribe
Uaioe265-1u Subscribe
Uce264-1-mini Subscribe
Uce264-1wb-mini Subscribe
Uce264-4-1u Subscribe
Uce264-8-1u Subscribe
Uhae264-16 Subscribe
Uhae265-1-mini Subscribe
Uhae265-1wb-mini Subscribe
Uhae265-4-1u Subscribe
Uhce264-1 Subscribe
Uhce264-16p32 Subscribe
Uhce264-1p2 Subscribe
Uhce264-1p2-1u Subscribe
Uhce264-1s Subscribe
Uhce264-1w Subscribe
Uhce264-1ws Subscribe
Uhce264-4p8 Subscribe
Uhe264-1-4k Subscribe
Uhe264-16 Subscribe
Uhe264-16l-3u Subscribe
Uhe264-16s-2u Subscribe
Uhe264-1l Subscribe
Uhe264-1l-4k Subscribe
Uhe264-1lw Subscribe
Uhe264-1s Subscribe
Uhe264-1s-mini Subscribe
Uhe264-1w-mini Subscribe
Uhe264-1wb-4g Subscribe
Uhe264-1wb-mini Subscribe
Uhe264-1wbs-2b Subscribe
Uhe264-1wbs-mini Subscribe
Uhe264-1ws-mini Subscribe
Uhe264-2-1u Subscribe
Uhe264-4 Subscribe
Uhe264-4-1u Subscribe
Uhe264-4l-1u Subscribe
Uhe264-8 Subscribe
Uhe264-8-1u Subscribe
Uhe264-8l-3u Subscribe
Uhe264-8s-2u Subscribe
Uhe265-1 Subscribe
Uhe265-1-1u Subscribe
Uhe265-1-4k Subscribe
Uhe265-1-mini Subscribe
Uhe265-16-3u Subscribe
Uhe265-16l-3u Subscribe
Uhe265-1l Subscribe
Uhe265-1lw Subscribe
Uhe265-1s-4k Subscribe
Uhe265-1s-mini Subscribe
Uhe265-1w Subscribe
Uhe265-1w-4k Subscribe
Uhe265-1w-mini Subscribe
Uhe265-1wb-4g Subscribe
Uhe265-1wb-mini Subscribe
Uhe265-1wbs-mini Subscribe
Uhe265-2-1u Subscribe
Uhe265-4 Subscribe
Uhe265-4-1u Subscribe
Uhe265-4s Subscribe
Uhe265-4s-1u Subscribe
Uhe265-8-1u Subscribe
Uhe265-8l-3u Subscribe
Uhe265-8s-1u Subscribe
Uhse265-1u Subscribe
Use264-16-3u Subscribe
Use264-1l Subscribe
Use264-1l-1u Subscribe
Use264-1l-mini Subscribe
Use264-1lw Subscribe
Use264-1wb-l Subscribe
Use264-4l-1u Subscribe
Use264-8-1u Subscribe
Use265-1-1u Subscribe
Use265-1-mini Subscribe
Use265-16l-3u Subscribe
Use265-1l Subscribe
Use265-1l-1u Subscribe
Use265-1l-mini Subscribe
Use265-1lw Subscribe
Use265-1w-mini Subscribe
Use265-1wb-4g Subscribe
Use265-1wb-l Subscribe
Use265-1wb-mini Subscribe
Use265-2-1u Subscribe
Use265-4-1u Subscribe
Use265-4l-1u Subscribe
Use265-8-1u Subscribe
Uve264-1l Subscribe
Uve264-1lw Subscribe
Uve265-1 Subscribe
Uve265-1w Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2020-16951 An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-04T15:12:08.336Z

Reserved: 2020-08-13T00:00:00

Link: CVE-2020-24216

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-10-06T14:15:12.277

Modified: 2024-11-21T05:14:30.603

Link: CVE-2020-24216

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses