{"id":7192,"date":"2025-06-23T18:05:59","date_gmt":"2025-06-23T18:05:59","guid":{"rendered":"http:\/\/localhost\/?p=7192"},"modified":"2025-06-23T18:05:59","modified_gmt":"2025-06-23T18:05:59","slug":"70mai-m300-rtsp-live-video-stream-endpoint-12-improper-authentication","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7192","title":{"rendered":"70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\n70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-23T22:31:06.024Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\n70mai<\/td>\n<\/tr>\n
Product<\/th>\nM300<\/td>\n<\/tr>\n
Version<\/th>\n20250611<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:A\/AC:L\/AT:N\/PR:N\/UI:N\/VC:L\/VI:N\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA vulnerability in the 70mai M300 allows unauthorized access to the live video stream via RTSP without proper authentication. This issue is problematic as it can be exploited publicly, and the vendor has not responded to the disclosure.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\n70mai<\/td>\n<\/tr>\n
Product<\/th>\nM300<\/td>\n<\/tr>\n
Affected Version<\/th>\n20250611<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n