What’s Vulnerable › Vulnerabilities

CVE-2020-25747

• Severity: critical (CVSS 9.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-25 · updated 2026-06-17
• Weakness: CWE-306

Description

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings (brightness, clarity, time), restart the camera, or reset it to factory settings.

Affected products

• Rubetek Rv-3406 Firmware: 339, 342
• Rubetek Rv-3409 Firmware: 339, 342
• Rubetek Rv-3411 Firmware: 339, 342

References

• https://github.com/jet-pentest/CVE-2020-25747
• https://github.com/jet-pentest/CVE-2020-25747

Get alerted when CVE-2020-25747 or the next vulnerability affects your stack