What’s Vulnerable › Vulnerabilities

CVE-2021-26627: EDrhyme QCP 200W Information Exposure Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-19 · updated 2026-06-17
• Weakness: CWE-284

Description

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.

Affected products

• EDrhyme Co.,Ltd QCP 200W: all versions

References

• https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663
• https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663

Get alerted when CVE-2021-26627 or the next vulnerability affects your stack