VULNERABILITY INTELLIGENCE

CVE-2018-13115

CVSS score6.5 MEDIUM
EPSS probability1.02%
CISA KEVNot currently listed
Published2018-10-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references