CVE-2020-25748
First published: Fri Sep 25 2020(Updated: )
A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rubetek RV-3406 | =339 | |
| Rubetek RV-3406 | =342 | |
| Rubetek Rv-3406 Firmware | ||
| Rubetek Rv-3409 Firmware | =339 | |
| Rubetek Rv-3409 Firmware | =342 | |
| Rubetek Rv-3409 Firmware | ||
| Rubetek RV-3411 | =339 | |
| Rubetek RV-3411 | =342 | |
| Rubetek Rv-3411 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-25748?
CVE-2020-25748 has a medium severity due to its potential for man-in-the-middle attacks.
How do I fix CVE-2020-25748?
To fix CVE-2020-25748, upgrade the firmware of Rubetek RV-3406, RV-3409, or RV-3411 cameras to the latest version.
What type of vulnerability is CVE-2020-25748?
CVE-2020-25748 is a cleartext transmission vulnerability that exposes video data to interception.
Which devices are affected by CVE-2020-25748?
CVE-2020-25748 affects Rubetek RV-3406, RV-3409, and RV-3411 cameras with specific firmware versions.
What are the risks associated with CVE-2020-25748?
The risks of CVE-2020-25748 include unauthorized access to video feeds and potential modification of data.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/rubetek
- canonical/rubetek rv-3406
- version/rubetek rv-3406/339
- version/rubetek rv-3406/342
- canonical/rubetek rv-3406 firmware
- canonical/rubetek rv-3409 firmware
- version/rubetek rv-3409 firmware/339
- version/rubetek rv-3409 firmware/342
- canonical/rubetek rv-3411
- version/rubetek rv-3411/339
- version/rubetek rv-3411/342
- canonical/rubetek rv-3411 firmware