CVE-2026-100292

Deferred Deferred - Pending Action

Authenticated Debug Interface Enables Command Injection in Anjvision YSSD-RTMP-H5

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: ICS-CERT

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if crafted inputs reach the underlying command handler.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-10-19

AI Q&A

2026-09-30

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100292

EUVD

EUVD-2026-89367

Affected Vendors & Products

Vendor	Product	Version / Range
anjvision	yssd-rtmp-h5	3.3.2.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. It involves a hidden debug interface that can be enabled via an authenticated request. Once enabled, this interface allows additional commands to be sent to a backend service, potentially exposing system-level functionality that could be misused with crafted inputs.

Detection Guidance

Detecting this vulnerability requires checking for the hidden debug interface in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. Monitor network traffic for authenticated requests enabling the debug interface or unusual command patterns sent to backend services. Inspect system logs for unexpected command execution or unauthorized access attempts.

Impact Analysis

An attacker with authenticated access could exploit this vulnerability to send malicious commands to the backend service. This could lead to unauthorized system access, data manipulation, or disruption of services, depending on the commands executed.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Unauthorized system access could result in data exposure or integrity issues, triggering legal and regulatory penalties.

Mitigation Strategies

Immediately update the firmware to a patched version if available. Disable the debug interface if it is enabled and restrict access to authenticated requests. Implement network segmentation to isolate the affected system and monitor for suspicious activity. Review and restrict backend service command handlers to prevent misuse.

Hi! I’m here to help you understand CVE-2026-100292. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70