CVE-2026-100297

Deferred Deferred - Pending Action

Unauthenticated Network Probe in Anjvision YSSD-RTMP-H5 Firmware

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: ICS-CERT

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-09-30

AI Q&A

2026-09-30

EPSS Evaluated

N/A

NVD

CVE-2026-100297

EUVD

EUVD-2026-89406

Affected Vendors & Products

Vendor	Product	Version / Range
anjvision	yssd-rtmp-h5	3.3.2.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 allows unauthenticated network checks to probe arbitrary hosts on the device's internal network. This could lead to exposure of internal information or data leakage through DNS queries.

Detection Guidance

Detecting this vulnerability requires monitoring for unauthorized host probing or DNS queries originating from the Anjvision YSSD-RTMP-H5 device. Check network logs for unusual outbound connections from the device to arbitrary hosts. Inspect DNS query logs for unexpected DNS lookups initiated by the device.

Impact Analysis

An attacker could exploit this to gather internal network details, intercept sensitive data via DNS leaks, or map out internal systems. This may compromise confidentiality of internal communications or data.

Compliance Impact

This vulnerability could lead to unauthorized data exposure or leaks, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Compliance may be compromised if internal data is leaked.

Mitigation Strategies

Immediately isolate the Anjvision YSSD-RTMP-H5 device from internal networks to prevent data leaks. Disable any unauthenticated network functions or update the firmware to a patched version if available. Monitor network traffic for signs of continued exploitation.

Hi! I’m here to help you understand CVE-2026-100297. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70