iCam365 CCTV Cameras RTSP Unauthenticated Access Vulnerability

A vulnerability exists in iCam365 CCTV camera models P201 and QC021, all versions through 43.4.0.0, allowing unauthenticated access to Real Time Streaming Protocol (RTSP) services. This could enable unauthorized users to access camera configuration information. Successful exploitation may also lead to unauthorized exposure of camera video streams.

Impact

Exploitation of this vulnerability could result in unauthorized access to camera configuration data and video streams.

Remediation

iCam365 did not respond to CISA's request for coordination. Contact iCam365 directly for more information.