An internal debug interface in Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4 can be activated through an undocumented pathway, exposing functions that are not intended for normal operation. Once enabled, the interface grants actions that may inadvertently give an attacker elevated system access. The flaw does not allow arbitrary code execution but enables privileged operations that could compromise device integrity and allow broader control of the system. This flaw is identified as CWE-489.

Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4 is affected. No other versions are listed as vulnerable in the CVE data.

The CVSS score of 5.3 indicates a moderate severity vulnerability. Because the EPSS score is not available, the likelihood of exploitation cannot be quantified from the data. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed widespread exploitation. The likely attack vector is through an undocumented internal pathway, which may be accessed from within the network or by a device local to the system. If an attacker can enable the debug interface, they could gain elevated privileges and perform unauthorized actions on the device.