The vulnerability allows an unauthenticated host on the same network segment to access the vSolution Matrix RTSP/RTP stream, which exposes current screen content in cleartext. The stream is not encrypted, so an attacker can capture or view presentation material without authorization. This flaw provides a confidentiality breach but does not grant code execution or denial of service capabilities.

The flaw affects WolfVision Cynap Pro and Cynap Core Pro devices that have the vSolution Matrix feature enabled. No specific firmware versions are listed, so any device with this feature active is potentially vulnerable.

The CVSS score of 7.1 indicates moderate-to-high risk, and the EPSS score is not available, while the vulnerability is not listed in the CISA KEV catalog. The bypass requires only local network access; an attacker with network connectivity to the device’s VLAN can connect to RTSP ports (TCP 554/8554) and obtain cleartext streams. No credentials or additional privileges are required, making exploitation straightforward on poorly segmented networks.