{"id":"CVE-2021-26627","aliases":["EUVD-2021-13421","GHSA-8xw8-ghg5-7c3p"],"status":"published","title":"EDrhyme QCP 200W Information Exposure Vulnerability","description":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01433,"percentile":0.73288,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-287"],"published":"2022-04-19T20:26:29Z","modified":"2026-06-17T03:43:35Z","products":[{"vendor":"edrhyme co.,ltd","product":"qcp 200w"},{"vendor":"qcp","product":"qcp200w_firmware"}],"references":[{"url":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26627"},{"url":"https://github.com/advisories/GHSA-8xw8-ghg5-7c3p"}],"sources":{"cve":[{"id":"CVE-2021-26627","title":"EDrhyme QCP 200W Information Exposure Vulnerability","description":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.","status":"published","published":"2022-04-19T20:26:29Z","modified":"2024-08-03T20:26:25.482Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:32:57.368269Z"}],"euvd":[{"id":"EUVD-2021-13421","description":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.","status":"published","published":"2022-04-19T20:26:29Z","modified":"2024-08-03T20:26:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T03:24:51.40664Z"}],"ghsa":[{"id":"GHSA-8xw8-ghg5-7c3p","title":"Real-time image information exposure is caused by insufficient authentication for activated RTSP...","description":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.","status":"published","published":"2022-04-20T00:00:31Z","modified":"2023-01-27T05:01:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:41:58.364763Z"}],"nvd":[{"id":"CVE-2021-26627","description":"Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image.","status":"published","published":"2022-04-19T21:15:12.807Z","modified":"2026-06-17T03:43:35.433Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-287"],"updated_at":"2026-11-02T14:07:06.029737Z"}]}}