| Titel | Gwelltimes Technology Yoosee Smart Camera GM8135S 21.00.01.36 Cleartext Transmission of Sensitive Information |
|---|
| Beschreibung | Cleartext Transmission of Sensitive Information in the Shenzhen Gwell Times Technology Yoosee GM8135S Camera /npc/npc binary allows a network-positioned attacker to intercept and reconstruct live UDP video streams transmitted from the camera during an active live stream.
Raw H.264 frames are transmitted without encryption and can be intercepted via tools like Wireshark and reconstructed using ffmpeg. |
|---|
| Quelle | ⚠️ https://akosibrylle.me/writeups/yoosee-cve |
|---|
| Benutzer | brylleee (UID 101717) |
|---|
| Einreichung | 29.09.2026 05:19 (vor 27 Tagen) |
|---|
| Moderieren | 25.10.2026 09:37 (26 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 426182 [Yoosee GM8135S Camera 21.00.01.36 Live UDP H.264 Video Stream /npc/npc schwache Verschlüsselung] |
|---|
| Punkte | 19 |
|---|