[ Vendor · 9 CVEs ]
Anjvision
CVEs affecting Anjvision published in the last 30 days, plus any Anjvision CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100296 | 29 Sep 2026 | CVSS 8.1 | Anjvision YSSD-RTMP-H5In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler… | |
| CVE-2026-100297 | 29 Sep 2026 | CVSS 5.3 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the… | |
| CVE-2026-100298 | 29 Sep 2026 | CVSS 8.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions… | |
| CVE-2026-100299 | 29 Sep 2026 | CVSS 6.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based… | |
| CVE-2026-100291 | 29 Sep 2026 | CVSS 9.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required… | |
| CVE-2026-100292 | 29 Sep 2026 | CVSS 8.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional… | |
| CVE-2026-100293 | 29 Sep 2026 | CVSS 8.8 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic… | |
| CVE-2026-100294 | 29 Sep 2026 | CVSS 7.5 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices… | |
| CVE-2026-100295 | 29 Sep 2026 | CVSS 6.3 | Anjvision YSSD-RTMP-H5In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions… |