CVE-2020-25748

8.1 highEPSS 0.8%

High (8.1) in rubetek. EPSS 0.8% chance of exploitation in the next 30 days.

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2020-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rubetek:rv-3406_firmware
rubetek:rv-3409_firmware
rubetek:rv-3411_firmware

References

https://github.com/jet-pentest/CVE-2020-25748
https://github.com/jet-pentest/CVE-2020-25748

Check your stack JSON