The firmware version 3.3.2.4 of Anjvision YSSD‑RTMP‑H5 stores a legacy password hash that uses a weak DES‑based encryption. This weak authentication mechanism can be exploited by attackers to guess or brute‑force the console password, allowing them to log in to the device’s serial console. Once on the console, an attacker could gain the firmware’s administrative privileges, potentially enabling further control or modification of the device’s behavior.

Anjvision’s YSSD‑RTMP‑H5 platform, specifically firmware build 3.3.2.4.

The CVSS score of 7 indicates a high severity, but the EPSS score is not available, so the likelihood of exploitation in practice is unclear. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be through the serial console—an attacker needs physical or network access to the console interface to exploit the weak password mechanism. If the console is exposed, the risk of compromise is immediate and could lead to full administrative takeover of the device.