CVE-2026-89173

Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure

View on CVE.org

Published Sep 11, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Description

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.

Analysis

Technical impact

The Smart Video Intercom System, produced by Kingdom Communication Associated, contains a Sensitive Data Exposure flaw that permits unauthenticated remote attackers to discover valid user accounts by exploiting measurable differences in system responses. This vulnerability is identified as CWE-204, signifying that an interface may inadvertently reveal sensitive information. The ability to enumerate accounts can provide attackers with information that could facilitate subsequent credential‑based attacks against the intercom system.

Affected Systems

Affected firmware on Kingdom Communication Associated models EH1000B, EH2070, EH3040, and EH4200 are exposed. Firmware updates—EH1000B 2.7.0A, EH2070 2.8.0A, EH3040 2.5.0A, and EH4200 2.5.0A—source data indicate that applying these revisions removes the enumeration vector.

Risk and Exploitability

The CVSS score of 6.9 rates this vulnerability as moderate severity. EPSS data is unavailable, and the issue is not listed in CISA’s KEV catalog, implying no documented active exploitation. The flaw can be triggered over the network by an unauthenticated remote attacker sending specially crafted requests and observing response variations, where reach is possible.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Kingdom Communication Associated

EH3040

unaffected

Version	Status	Constraints
`0`	affected	< 2.5.0A

Kingdom Communication Associated

EH4200

unaffected

Version	Status	Constraints
`0`	affected	< 2.5.0A

Kingdom Communication Associated

EH1000B

unaffected

Version	Status	Constraints
`0`	affected	< 2.7.0A

Kingdom Communication Associated

EH2070

unaffected

Version	Status	Constraints
`0`	affected	< 2.8.0A

No data.

No data.

Vendor Product Versions

Kingdom Communication Associated

Eh1000b

Version	Status	Scheme	Platform
`[0,2.7.0A)`	affected	generic	—

Kingdom Communication Associated

Eh2070

Version	Status	Scheme	Platform
`[0,2.8.0A)`	affected	generic	—

Kingdom Communication Associated

Eh3040

Version	Status	Scheme	Platform
`[0,2.5.0A)`	affected	generic	—

Kingdom Communication Associated

Eh4200

Version	Status	Scheme	Platform
`[0,2.5.0A)`	affected	generic	—

Remediation

Vendor Solution

Update EH3040 to version 2.5.0A Update EH4200 to version 2.5.0A Update EH1000B to version 2.7.0A Update EH2070 to version 2.8.0A

OpenCVE Recommended Actions

Update EH3040 to version 2.5.0A
Update EH4200 to version 2.5.0A
Update EH1000B to version 2.7.0A
Update EH2070 to version 2.8.0A

Generated by OpenCVE AI on September 11, 2026 at 08:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.436% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html
https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html

History

Sep 13, 2026 8:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Kingdom Communication Associated Kingdom Communication Associated eh1000b Kingdom Communication Associated eh2070 Kingdom Communication Associated eh3040 Kingdom Communication Associated eh4200
Vendors & Products		Kingdom Communication Associated Kingdom Communication Associated eh1000b Kingdom Communication Associated eh2070 Kingdom Communication Associated eh3040 Kingdom Communication Associated eh4200

Sep 11, 2026 11:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 11, 2026 7:45 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Title		Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure
Weaknesses		CWE-204
References		https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}`

Subscriptions

Kingdom Communication Associated Eh1000b Eh2070 Eh3040 Eh4200

Weaknesses

CWE-204
Observable Response Discrepancy

Sources

CVE record Updated: Sep 11, 2026, 4:18 PM

Status: PUBLISHED
Assigner: twcert
Published: Sep 11, 2026, 7:27 AM
Updated: Sep 11, 2026, 4:18 PM
Reserved: Sep 11, 2026, 6:14 AM

View source JSON

Vulnrichment Updated: Sep 11, 2026, 4:18 PM

Updated: Sep 11, 2026, 4:18 PM

NVD Updated: Sep 11, 2026, 5:19 PM

Status: Deferred
Published: Sep 11, 2026, 8:16 AM
Modified: Sep 11, 2026, 5:19 PM

View source JSON

Red Hat No data

No data.

OpenCVE enrichment Updated: Sep 13, 2026, 7:56 PM

Updated: Sep 13, 2026, 7:56 PM

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89173", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "PUBLISHED", "assignerShortName": "twcert", "dateReserved": "2026-09-11T06:14:45.642Z", "datePublished": "2026-09-11T07:27:52.216Z", "dateUpdated": "2026-09-11T16:18:14.203Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2026-09-11T07:27:52.216Z"}, "title": "Kingdom Communication Associated\uff5cSmart Video Intercom System - Sensitive Data Exposure", "datePublic": "2026-09-11T07:23:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-204", "description": "CWE-204 Response Discrepancy Information Exposure", "type": "CWE"}]}], "affected": [{"vendor": "Kingdom Communication Associated", "product": "EH3040", "versions": [{"status": "affected", "version": "0", "lessThan": "2.5.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Kingdom Communication Associated", "product": "EH4200", "versions": [{"status": "affected", "version": "0", "lessThan": "2.5.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Kingdom Communication Associated", "product": "EH1000B", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Kingdom Communication Associated", "product": "EH2070", "versions": [{"status": "affected", "version": "0", "lessThan": "2.8.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.</p>"}]}], "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html", "tags": ["third-party-advisory"]}, {"url": "https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html", "tags": ["third-party-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "Update EH3040 to version 2.5.0A\nUpdate EH4200 to version 2.5.0A\nUpdate EH1000B to version 2.7.0A\nUpdate EH2070 to version 2.8.0A", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Update EH3040 to version 2.5.0A<br>Update EH4200 to version 2.5.0A<br>Update EH1000B to version 2.7.0A<br>Update EH2070 to version 2.8.0A</p>"}]}], "source": {"advisory": "TVN-202609004", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-11T16:18:05.490524Z", "id": "CVE-2026-89173", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-11T16:18:14.203Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-89173", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-11T16:18:05.490524Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-11T16:18:11.034Z"}}], "cna": {"title": "Kingdom Communication Associated\uff5cSmart Video Intercom System - Sensitive Data Exposure", "source": {"advisory": "TVN-202609004", "discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Kingdom Communication Associated", "product": "EH3040", "versions": [{"status": "affected", "version": "0", "lessThan": "2.5.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Kingdom Communication Associated", "product": "EH4200", "versions": [{"status": "affected", "version": "0", "lessThan": "2.5.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Kingdom Communication Associated", "product": "EH1000B", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Kingdom Communication Associated", "product": "EH2070", "versions": [{"status": "affected", "version": "0", "lessThan": "2.8.0A", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update EH3040 to version 2.5.0A\nUpdate EH4200 to version 2.5.0A\nUpdate EH1000B to version 2.7.0A\nUpdate EH2070 to version 2.8.0A", "supportingMedia": [{"type": "text/html", "value": "<p>Update EH3040 to version 2.5.0A<br>Update EH4200 to version 2.5.0A<br>Update EH1000B to version 2.7.0A<br>Update EH2070 to version 2.8.0A</p>", "base64": false}]}], "datePublic": "2026-09-11T07:23:00.000Z", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html", "tags": ["third-party-advisory"]}, {"url": "https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.", "supportingMedia": [{"type": "text/html", "value": "<p>Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-204", "description": "CWE-204 Response Discrepancy Information Exposure"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2026-09-11T07:27:52.216Z"}}}, "cveMetadata": {"cveId": "CVE-2026-89173", "state": "PUBLISHED", "dateUpdated": "2026-09-11T16:18:14.203Z", "dateReserved": "2026-09-11T06:14:45.642Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2026-09-11T07:27:52.216Z", "assignerShortName": "twcert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "EH3040", "vendor": "Kingdom Communication Associated", "versions": [{"lessThan": "2.5.0A", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "EH4200", "vendor": "Kingdom Communication Associated", "versions": [{"lessThan": "2.5.0A", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "EH1000B", "vendor": "Kingdom Communication Associated", "versions": [{"lessThan": "2.7.0A", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "EH2070", "vendor": "Kingdom Communication Associated", "versions": [{"lessThan": "2.8.0A", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "twcert@cert.org.tw"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses."}], "id": "CVE-2026-89173", "lastModified": "2026-09-11T17:19:31.583", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "twcert@cert.org.tw", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "twcert@cert.org.tw", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-89173", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-11T16:18:05.490524Z", "version": "2.0.3"}}]}, "published": "2026-09-11T08:16:48.230", "references": [{"source": "twcert@cert.org.tw", "url": "https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html"}, {"source": "twcert@cert.org.tw", "url": "https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html"}], "sourceIdentifier": "twcert@cert.org.tw", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-204"}], "source": "twcert@cert.org.tw", "type": "Secondary"}]}