Missing Brute-force Protection in Smart Video Intercom System

Executive Summary

The Smart Video Intercom System by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. This means unauthenticated remote attackers can repeatedly attempt login credentials to gain access to valid accounts without any protection mechanisms in place.

Useful 0 Not Useful 0

Impact Analysis

Attackers could exploit this to gain unauthorized access to accounts, potentially compromising privacy, sensitive data, or allowing physical access through the intercom system. The high CVSS score indicates significant risk.

Useful 0 Not Useful 0

Mitigation Strategies

Enable account lockout after a few failed login attempts to prevent brute-force attacks. Implement strong password policies and multi-factor authentication for all accounts. Monitor login attempts for suspicious activity and restrict access to the login interface via network-level controls.

Useful 0 Not Useful 0