CVE-2015-8253

The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive (1) message or (2) MJPEG video data by sniffing the network.

Score

CVSS 3.0 3.7 Low

Status

Modified - cret@cert.org

Published

2015-12-27

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Frontel Protocol (Rsi Video Technologies)

References

• http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/
• https://www.kb.cert.org/vuls/id/792004