CVE-2020-25747
Critical
Description
The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings (brightness, clarity, time), restart the camera, or reset it to factory settings.
SeverityCritical
CVSS9.4
Exploit probability—
ProductRubetek Rv-3406 Firmware
PublishedSep 25, 2020
First seenSep 25, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubetek rv-3406_firmware | 339, 342 | — |
| rubetek rv-3409_firmware | 339, 342 | — |
| rubetek rv-3411_firmware | 339, 342 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.