CVE-2026-12527

Broken Authorization Leading to Unauthenticated Live Video Exposure on V380 IP Camera

Published Jun 18, 2026 CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed

Description

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

Analysis

Technical impact

A broken authorization boundary in the RTSP media delivery pipeline of the V380 IP Camera allows unauthenticated network actors to bypass the device’s credential‑enforced live‑view workflow and directly retrieve real‑time video stream data. This compromises the confidentiality of live video feeds, enabling potential surveillance or data exfiltration. The weakness is a classic authentication bypass (CWE‑306).

Affected Systems

Shenzhen Liandian Communication Technology LTD’s V380 IP Camera, running firmware AppFHE1 V1.0.6.020230803. No other versions or products are documented as affected.

Risk and Exploitability

With a CVSS score of 6, the vulnerability carries moderate impact and may be exploitable over the network wherever RTSP services are exposed. The EPSS score is not available, and the issue is currently not listed in CISA’s KEV catalog. Attackers can exploit it by sending unauthenticated RTSP requests from any remote network location, receiving real‑time video without requiring credentials. The likely attack vector is remote network access via the RTSP service.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Shenzhen Liandian Communication Technology LTD

V380 IP Camera / AppFHE1_V1.0.6.0

unknown

Version	Status	Constraints
`AppFHE1_V1.0.6.020230803`	affected	—

No data.

Vendor Product Versions

Shenzhen Liandian

V380 Ip Camera

Version	Status	Scheme	Platform
`AppFHE1_V1.0.6.020230803`	affected	generic	['embedded/linux']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade to a firmware version that fixes the broken authorization boundary.
Configure firewall or router rules to block incoming RTSP traffic from untrusted networks, allowing only controlled IP ranges.
Deploy network segmentation or a virtual LAN for security cameras, and implement traffic monitoring or intrusion detection to alert on suspicious RTSP connections.

Generated by OpenCVE AI on June 18, 2026 at 18:08 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.215% probability within 30 days)

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/AounShAh/Research-on-v380-cctv-ip-camera#broken-access-control-leading-to-critical-live-video-exposure

History

Jun 21, 2026 9:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Shenzhen Liandian Shenzhen Liandian v380 Ip Camera
Vendors & Products		Shenzhen Liandian Shenzhen Liandian v380 Ip Camera

Jun 18, 2026 6:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Broken Authorization Leading to Unauthenticated Live Video Exposure on V380 IP Camera

Jun 18, 2026 4:45 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.
Weaknesses		CWE-306
References		https://github.com/AounShAh/Research-on-v380-cctv-ip-camera#broken-access-control-leading-to-critical-live-video-exposure
Metrics		cvssV4_0 `{'score': 6, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/V:C/U:Red'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`