CVE-2026-100296
Deferred Deferred - Pending Action

Authentication Bypass in Anjvision YSSD-RTMP-H5 Firmware

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: ICS-CERT

Description
In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler does not verify the session's privilege level, so any authenticated user can trigger it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-30
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-100296
EUVD
EUVD-2026-89405

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
anjvision yssd-rtmp-h5 3.3.2.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-754 The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST request to /setUserConfig can silently reset the administrator password to a default value. This happens because the web server's SOAP-RPC handler processes the request without checking the user's privilege level, allowing any authenticated user to exploit it.

Detection Guidance

Detect this vulnerability by checking for POST requests to /setUserConfig with an empty body on Anjvision YSSD-RTMP-H5 devices running firmware 3.3.2.4. Monitor for unexpected password resets or authentication state corruption.

Impact Analysis

An attacker could gain full administrative access to the device by resetting the password. This could allow unauthorized control over the system, potential data breaches, or disruption of services relying on the device.

Compliance Impact

This vulnerability could lead to unauthorized access, violating data protection requirements under GDPR and HIPAA. It may result in unauthorized data exposure or modification, leading to non-compliance and potential legal consequences.

Mitigation Strategies

Immediately update the firmware to a patched version. Restrict network access to the /setUserConfig endpoint. Review and reset administrator passwords. Monitor for unauthorized changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100296. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart