| शीर्षक | Tenda Tenda Multiple IP Cameras Multiple Versions Missing Authentication |
|---|
| विवरण | Affected Version
Tenda smart camera firmware based on the ZhiLing/Kylin OEM solution, including the following verified product series and versions:
CH series: CH10, CH7, CH7G
CP series: CP3, CP3 Pro, CP7
TC3 series: TC3B14C, TC3B15C, TC3T14C, TC3T15C
Verified firmware versions include V21.x, V22.x, V25.x, V26.x and V27.x branches. Other Tenda smart camera firmware versions using the same ZhiLing/Kylin OEM implementation may also be affected.
Vulnerability Description
A missing authentication vulnerability exists in certain Tenda smart camera firmware. When the device is configured for Simplified Chinese users, the firmware initializes both RTSP authentication and ONVIF authentication as disabled by default.
As a result, a network-reachable attacker can access the camera video stream through RTSP without valid credentials. The attacker may also access ONVIF functions, such as device management or PTZ control, without authentication. |
|---|
| स्रोत | ⚠️ https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/tree/main/Tenda%20RTSP_ONVIF%20Auth%20Bypass |
|---|
| उपयोगकर्ता | Howitouchyou (UID 99230) |
|---|
| सबमिशन | 25/06/2026 05:14 AM (2 महीनों पहले) |
|---|
| संयम | 13/08/2026 04:39 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 389500 [Tenda CH7 तक 20260625 RTSP/ONVIF कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|