Security Advisory

CVE-2025-9983

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-22 11:06:54
Last updated 2025-09-22 11:42:40
Assigner CERT-PL
State PUBLISHED

Description

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change cameras behavior. The vendor did not respond in any way. Only version 11.100001.01.28 was tested, other versions might also be vulnerable.