SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-3948

An unauthenticated, remote person can connect to this endpoint and potentionally listen to the audio of the capturing device.

HIGH 7.5EPSS 25.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 25.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH-SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R and V2.623.0000000.1.R, Dahua NVR5XX-4KS2 V3.216.0000006.0.R, Dahua NVR4XXX-4KS2 V3.216.0000006.0.R, and NVR2XXX-4KS2 do not require authentication to access the HTTP endpoint /videotalk. An unauthenticated, remote person can connect to this endpoint and potentionally listen to the audio of the capturing device.

CVSS 3.0
7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
25.02% probability · 98th percentile
CISA KEV
Not listed
Weakness
CWE-306
Affected
amcrest/ip2m-841b firmware · dahua/dh-ipc-hx863x · dahua/dh-ipc-hx883x · dahua/dh-sd4xxxxx · dahua/dh-sd5xxxxx · dahua/dh-sd6xxxxx · dahua/ipc-hx4x3x · dahua/ipc-hx5x3x · dahua/ipc-xxbxx · dahua/nvr2xxx-4ks2 · dahua/nvr4xxx-4ks2 · dahua/nvr5xxx-4ks2
Source
vulnreport@tenable.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.