CVE-2024-58336

Unknown Unknown - Not Provided

Unauthenticated Video Stream Access in Akuvox Smart Intercom S

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: VulnCheck

Description

Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2025-12-30

Generated

2026-07-06

AI Q&A

2025-12-31

EPSS Evaluated

2026-07-05

NVD

CVE-2024-58336

Affected Vendors & Products

Vendor	Product	Version / Range
akuvox	s539	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Detection Guidance

You can detect this vulnerability by attempting to access the video.cgi endpoint on port 8080 of the Akuvox Smart Intercom S539 device. For example, use a command like: curl http://<device-ip>:8080/video.cgi If the device returns live video stream data without requiring authentication, it is vulnerable.

Mitigation Strategies

Immediate mitigation steps include restricting network access to the device's port 8080, implementing firewall rules to block unauthorized access, and applying any available firmware updates or patches from the vendor to fix the unauthenticated access issue.

Executive Summary

This vulnerability exists in Akuvox Smart Intercom S539 devices, where an unauthenticated remote attacker can access live video streams by directly requesting the video.cgi endpoint on port 8080. This means attackers do not need to authenticate to retrieve video stream data from affected doorphone and intercom devices.

Impact Analysis

The vulnerability allows unauthorized remote attackers to access live video streams without authentication, potentially leading to privacy breaches, unauthorized surveillance, and exposure of sensitive video data from the affected devices.

Hi! I’m here to help you understand CVE-2024-58336. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70