CVE-2024-58336: Akuvox Smart Intercom S539 Unauthenticated Video Stream Disclosure
Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58336?
CVE-2024-58336 is classified as a high-severity vulnerability due to its potential for unauthorized access to live video streams.
How do I fix CVE-2024-58336?
To fix CVE-2024-58336, restrict access to the video.cgi endpoint and implement proper authentication controls.
What is the impact of CVE-2024-58336?
The impact of CVE-2024-58336 is that it allows remote attackers to access sensitive live video streams without authentication.
Which devices are affected by CVE-2024-58336?
CVE-2024-58336 affects the Akuvox Smart Intercom S539.
Is CVE-2024-58336 exploitable remotely?
Yes, CVE-2024-58336 can be exploited remotely by sending requests to the vulnerable video.cgi endpoint on port 8080.