high7.5
CVE-2020-24216
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders.
Impact
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Szuray | Iptv\/H.264 Video Encoder Firmware | All versions |
| Szuray | Iptv\/H.265 Video Encoder Firmware | All versions |
| Jtechdigital | H.264 Iptv Encoder 1080p\@60hz Firmware | All versions |
| Provideoinstruments | Vecaster-Hd-H264 Firmware | All versions |
| Provideoinstruments | Vecaster-Hd-Hevc Firmware | All versions |
| Provideoinstruments | Vecaster-4k-Hevc Firmware | All versions |
| Provideoinstruments | Vecaster-Hd-Sdi Firmware | All versions |