CVE-2019-25248
Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure
- State
- Published
- Severity
- 8.7 High
- Published
- Dec 24, 2025
- Updated
- Dec 24, 2025
- Reserved
- Dec 24, 2025
Description
Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve the camera's RTSP stream by exploiting the lack of authentication in the video access mechanism.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
N100 H.264 VGA IP CameraBeward |
|
References
- ExploitDB-46317exploit
- Beward Official Product Homepageproduct
- Zero Science Lab Disclosure (ZSL-2019-5509)third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.