VULNERABILITY INTELLIGENCE

CVE-2015-8254

CVSS score5.9 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2015-12-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server data stream.

Weakness classification

  • CWE-345: Insufficient Verification of Data Authenticity

Primary references