Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if crafted inputs reach the underlying command handler.
Published: 2026-09-29
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Assess Impact
AI Analysis

Impact

A hidden debug interface can be activated via an authenticated request in Anjvision YSSD‑RTMP‑H5 firmware, giving the attacker the ability to send additional commands to a backend service. These commands can feed into an underlying command handler, allowing the attacker to inject OS‑level commands. The flaw is a classic OS command injection vulnerability (CWE‑78) that can compromise confidentiality, integrity, and availability by enabling arbitrary code execution.

Affected Systems

The vulnerability affects Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4. No other versions or vendors are listed as affected.

Risk and Exploitability

The CVSS score of 8.7 classifies the issue as high severity. EPSS data is unavailable and the flaw is not listed in CISA’s KEV catalog, but the risk remains significant because an authenticated user can enable the debug interface and then exploit OS command injection. The likely attack vector is a remote authenticated request to the hidden endpoint, after which the attacker crafts inputs that reach the command handler. Given the potential for full system compromise, timely mitigation is essential.

Generated by OpenCVE AI on September 29, 2026 at 21:39 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict or disable the hidden debug interface so that authenticated requests can no longer enable it.
  • Block network access to the debug endpoint or segment the device to prevent remote users from reaching it.
  • Verify that authenticated sessions cannot invoke the debug enable functionality and remove that capability from the firmware if possible.

Generated by OpenCVE AI on September 29, 2026 at 21:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Anjvision
Anjvision yssd-rtmp-h5
Vendors & Products Anjvision
Anjvision yssd-rtmp-h5

Tue, 29 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
Description In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if crafted inputs reach the underlying command handler.
Title Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Anjvision Yssd-rtmp-h5
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-09-29T21:01:58.854Z

Reserved: 2026-09-25T17:42:35.995Z

Link: CVE-2026-100292

cve-icon Vulnrichment

Updated: 2026-09-29T20:59:59.177Z

cve-icon NVD

Status : Deferred

Published: 2026-09-29T20:17:09.477

Modified: 2026-09-29T22:17:05.627

Link: CVE-2026-100292

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T20:36:11Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')