{"id":59006,"date":"2024-08-20T18:30:07","date_gmt":"2024-08-20T15:30:07","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/180262\/ZSL-2024-5826.txt"},"modified":"2024-08-20T18:30:07","modified_gmt":"2024-08-20T15:30:07","slug":"akuvox-smart-intercom-doorphone-unauthenticated-stream-disclosure","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/akuvox-smart-intercom-doorphone-unauthenticated-stream-disclosure\/","title":{"rendered":"Akuvox Smart Intercom\/Doorphone Unauthenticated Stream Disclosure"},"content":{"rendered":"<p>Akuvox Smart Intercom\/Doorphone Unauthenticated Stream Disclosure<\/p>\n<p>Vendor: The Akuvox Company<br \/>Product web page: https:\/\/www.akuvox.com<br \/>Affected version: Doorphone:<br \/>S539<br \/>S532<br \/>X916<br \/>X915<br \/>X912<br \/>R29<br \/>Intercom:<br \/>R20K-2<br \/>R20A-2<br \/>C313W-2<br \/>NS-2<br \/>NC-2<br \/>NX-2<br \/>Firmware: 912.30.1.137<\/p>\n<p>Summary: Vandal-resistant Door Phone for High-end Buildings. Offering<br \/>top-of-the-line features, Akuvox X912 is targeted at high-end residential<br \/>and commercial projects. With a compact size, it is perfect for buildings<br \/>with limited installation space.<\/p>\n<p>Desc: The application suffers from an unauthenticated live stream disclosure<br \/>when requesting video.cgi endpoint on port 8080.<\/p>\n<p>Tested on: lighttpd\/1.4.30<br \/>EasyHttpServer<\/p>\n<p>Vulnerability discovered by Gjoko &#8216;LiquidWorm&#8217; Krstic<br \/>@zeroscience<\/p>\n<p>Advisory ID: ZSL-2024-5826<br \/>Advisory URL: https:\/\/www.zeroscience.mk\/en\/vulnerabilities\/ZSL-2024-5826.php<\/p>\n<p>25.02.2024<\/p>\n<p>&#8212;<\/p>\n<p>$ firefox http:\/\/192.168.1.2:8080\/video.cgi<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Akuvox Smart Intercom\/Doorphone Unauthenticated Stream Disclosure Vendor: The Akuvox CompanyProduct web page: https:\/\/www.akuvox.comAffected version: Doorphone:S539S532X916X915X912R29Intercom:R20K-2R20A-2C313W-2NS-2NC-2NX-2Firmware: 912.30.1.137 Summary: Vandal-resistant Door Phone for High-end Buildings. Offeringtop-of-the-line features, Akuvox X912 is targeted at high-end residentialand commercial projects. With a compact size, it is perfect for buildingswith limited installation space. Desc: The application suffers from an unauthenticated live stream &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-59006","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=59006"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/59006\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=59006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=59006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=59006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}