What’s Vulnerable › Vulnerabilities

CVE-2019-25248: Beward N100 M2.1.6 Unauthenticated RTSP Video Stream Disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17
• Weakness: CWE-306

Description

Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve the camera's RTSP stream by exploiting the lack of authentication in the video access mechanism.

Affected products

• Beward N100 H.264 VGA IP Camera: M2.1.6.04C014

References

• https://www.beward.net
• https://www.exploit-db.com/exploits/46317
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5509.php
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5509.php

Get alerted when CVE-2019-25248 or the next vulnerability affects your stack