Beveiligingsadvies

CVE-2019-25236

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-24 19:27:55
Laatst bijgewerkt 2025-12-24 20:23:52
Toegewezen door VulnCheck
CVSS-score 9.8
Status PUBLISHED

Beschrijving

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/get_jpeg endpoint without authentication.