CVE-2019-25248

8.7 highEPSS 0.5%

Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve the camera's RTSP stream by exploiting the lack of authentication in the video access mechanism.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-12-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.beward.net
https://www.exploit-db.com/exploits/46317
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5509.php
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5509.php

Check your stack JSON