CVE-2024-58336

HIGH EPSS 26.8%
Published Dec 30, 20256mo ago · Modified Jun 17, 20262w ago
8.7 CVSS 4.0
High
Find Similar
Published Dec 30, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago

Description

Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.

CVSS Details

Base Score
8.7
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
26.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-306 Missing Authentication for Critical Function Authentication

Affected Products 24

VendorProductVersionRange
akuvoxs539_firmware912.30.1.137any
akuvoxs539*any
akuvoxs532_firmware912.30.1.137any
akuvoxs532*any
akuvoxx916_firmware912.30.1.137any
akuvoxx916*any
akuvoxx915_firmware912.30.1.137any
akuvoxx915*any
akuvoxx912_firmware912.30.1.137any
akuvoxx912*any
akuvoxr29_firmware912.30.1.137any
akuvoxr29*any
akuvoxr20k-2_firmware912.30.1.137any
akuvoxr20k-2*any
akuvoxr20a-2_firmware912.30.1.137any
akuvoxr20a-2*any
akuvoxc313w-2_firmware912.30.1.137any
akuvoxc313w-2*any
akuvoxns-2_firmware912.30.1.137any
akuvoxns-2*any
akuvoxnc-2_firmware912.30.1.137any
akuvoxnc-2*any
akuvoxnx-2_firmware912.30.1.137any
akuvoxnx-2*any

References 3

  • packetstormsecurity.com https://packetstormsecurity.com/files/180262/
    Broken Link
  • vulncheck.com https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-unauthenticated-video-stream-disclosure
    Third Party Advisory
  • zeroscience.mk https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5826.php
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.