Description
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-16951 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private. |
References
History
No history.
Subscriptions
Jtechdigital
Subscribe
H.264 Iptv Encoder 1080p\@60hz
Subscribe
H.264 Iptv Encoder 1080p\@60hz Firmware
Subscribe
Provideoinstruments
Subscribe
Vecaster-4k-hevc
Subscribe
Vecaster-4k-hevc Firmware
Subscribe
Vecaster-hd-h264
Subscribe
Vecaster-hd-h264 Firmware
Subscribe
Vecaster-hd-hevc
Subscribe
Vecaster-hd-hevc Firmware
Subscribe
Vecaster-hd-sdi
Subscribe
Vecaster-hd-sdi Firmware
Subscribe
Szuray
Subscribe
Iptv\/h.264 Video Encoder Firmware
Subscribe
Iptv\/h.265 Video Encoder Firmware
Subscribe
Uaioe264-1u
Subscribe
Uaioe265-1u
Subscribe
Uce264-1-mini
Subscribe
Uce264-1wb-mini
Subscribe
Uce264-4-1u
Subscribe
Uce264-8-1u
Subscribe
Uhae264-16
Subscribe
Uhae265-1-mini
Subscribe
Uhae265-1wb-mini
Subscribe
Uhae265-4-1u
Subscribe
Uhce264-1
Subscribe
Uhce264-16p32
Subscribe
Uhce264-1p2
Subscribe
Uhce264-1p2-1u
Subscribe
Uhce264-1s
Subscribe
Uhce264-1w
Subscribe
Uhce264-1ws
Subscribe
Uhce264-4p8
Subscribe
Uhe264-1-4k
Subscribe
Uhe264-16
Subscribe
Uhe264-16l-3u
Subscribe
Uhe264-16s-2u
Subscribe
Uhe264-1l
Subscribe
Uhe264-1l-4k
Subscribe
Uhe264-1lw
Subscribe
Uhe264-1s
Subscribe
Uhe264-1s-mini
Subscribe
Uhe264-1w-mini
Subscribe
Uhe264-1wb-4g
Subscribe
Uhe264-1wb-mini
Subscribe
Uhe264-1wbs-2b
Subscribe
Uhe264-1wbs-mini
Subscribe
Uhe264-1ws-mini
Subscribe
Uhe264-2-1u
Subscribe
Uhe264-4
Subscribe
Uhe264-4-1u
Subscribe
Uhe264-4l-1u
Subscribe
Uhe264-8
Subscribe
Uhe264-8-1u
Subscribe
Uhe264-8l-3u
Subscribe
Uhe264-8s-2u
Subscribe
Uhe265-1
Subscribe
Uhe265-1-1u
Subscribe
Uhe265-1-4k
Subscribe
Uhe265-1-mini
Subscribe
Uhe265-16-3u
Subscribe
Uhe265-16l-3u
Subscribe
Uhe265-1l
Subscribe
Uhe265-1lw
Subscribe
Uhe265-1s-4k
Subscribe
Uhe265-1s-mini
Subscribe
Uhe265-1w
Subscribe
Uhe265-1w-4k
Subscribe
Uhe265-1w-mini
Subscribe
Uhe265-1wb-4g
Subscribe
Uhe265-1wb-mini
Subscribe
Uhe265-1wbs-mini
Subscribe
Uhe265-2-1u
Subscribe
Uhe265-4
Subscribe
Uhe265-4-1u
Subscribe
Uhe265-4s
Subscribe
Uhe265-4s-1u
Subscribe
Uhe265-8-1u
Subscribe
Uhe265-8l-3u
Subscribe
Uhe265-8s-1u
Subscribe
Uhse265-1u
Subscribe
Use264-16-3u
Subscribe
Use264-1l
Subscribe
Use264-1l-1u
Subscribe
Use264-1l-mini
Subscribe
Use264-1lw
Subscribe
Use264-1wb-l
Subscribe
Use264-4l-1u
Subscribe
Use264-8-1u
Subscribe
Use265-1-1u
Subscribe
Use265-1-mini
Subscribe
Use265-16l-3u
Subscribe
Use265-1l
Subscribe
Use265-1l-1u
Subscribe
Use265-1l-mini
Subscribe
Use265-1lw
Subscribe
Use265-1w-mini
Subscribe
Use265-1wb-4g
Subscribe
Use265-1wb-l
Subscribe
Use265-1wb-mini
Subscribe
Use265-2-1u
Subscribe
Use265-4-1u
Subscribe
Use265-4l-1u
Subscribe
Use265-8-1u
Subscribe
Uve264-1l
Subscribe
Uve264-1lw
Subscribe
Uve265-1
Subscribe
Uve265-1w
Subscribe
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-04T15:12:08.336Z
Reserved: 2020-08-13T00:00:00.000Z
Link: CVE-2020-24216
No data.
Status : Modified
Published: 2020-10-06T14:15:12.277
Modified: 2024-11-21T05:14:30.603
Link: CVE-2020-24216
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD