Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.
Published: 2026-09-29
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized access to device operations
Action: Assess Impact
AI Analysis

Impact

The flaw lies in ONVIF service endpoints that process management requests without enforcing the required authentication, which allows an attacker to perform sensitive device operations without permission. This lack of authentication enforcement can lead to the attacker executing any action that the device’s management API allows, potentially changing device settings, initiating streams, or other critical functions. The weakness is classified as CWE-1188: Improper Authentication.

Affected Systems

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 is affected. Only the listed firmware revision is known to be vulnerable; newer revisions have not been confirmed to contain this issue.

Risk and Exploitability

The CVSS score of 9.3 indicates a high severity vulnerability, and it is not yet listed in CISA KEV. The EPSS score is not available, but the lack of authentication suggests that exploitation could occur over the network via the ONVIF service endpoints, making the device reachable to unauthorized users. The high impact and lack of mitigations increase the risk to organizations that host these devices without additional controls or patches.

Generated by OpenCVE AI on September 29, 2026 at 21:39 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the device firmware to a version that enforces authentication on ONVIF service endpoints.
  • Disable or restrict the ONVIF service so that only trusted networks or devices can access it.
  • Apply network segmentation or firewall rules to block unauthenticated traffic to the device.

Generated by OpenCVE AI on September 29, 2026 at 21:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Anjvision
Anjvision yssd-rtmp-h5
Vendors & Products Anjvision
Anjvision yssd-rtmp-h5

Tue, 29 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
Description In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.
Title Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5
Weaknesses CWE-1188
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Anjvision Yssd-rtmp-h5
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-09-29T21:01:58.729Z

Reserved: 2026-09-25T17:42:35.994Z

Link: CVE-2026-100291

cve-icon Vulnrichment

Updated: 2026-09-29T20:59:57.715Z

cve-icon NVD

Status : Deferred

Published: 2026-09-29T20:17:09.300

Modified: 2026-09-29T22:17:04.057

Link: CVE-2026-100291

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T20:36:13Z

Weaknesses
  • CWE-1188

    Initialization of a Resource with an Insecure Default