CVE-2026-89173: Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kingdom Communication Associated Smart Video Intercom System EH1000Bto a version that resolves this vulnerability.Fixed in 2.7.0A - Upgrade
Upgrade
Kingdom Communication Associated Smart Video Intercom System EH2070to a version that resolves this vulnerability.Fixed in 2.8.0A - Upgrade
Upgrade
Kingdom Communication Associated Smart Video Intercom System EH3040to a version that resolves this vulnerability.Fixed in 2.5.0A - Upgrade
Upgrade
Kingdom Communication Associated Smart Video Intercom System EH4200to a version that resolves this vulnerability.Fixed in 2.5.0A
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated remote attacker who can reach the Smart Video Intercom System over the network can attempt to exploit the response differences. No credentials or user interaction are required.
What information can an attacker obtain?
An attacker can enumerate valid user accounts by comparing differences in system responses. The provided information does not indicate exposure of passwords or other data.
How can I determine whether exploitation may have occurred?
Review available system or network logs for repeated authentication or account-related requests that vary usernames and compare responses. The provided information does not identify specific endpoints, response patterns, or log indicators.