CVE-2024-58336

published 2025-12-30

CVE-2024-58336: Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi…

Priority P2 37 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Akuvox Smart Intercom S539 contains an unauthenticated vulnerability that allows remote attackers to access live video streams by requesting the video.cgi endpoint on port 8080. Attackers can retrieve video stream data without authentication by directly accessing the specified endpoint on affected Akuvox doorphone and intercom devices.

Affected

23 ranges

Vendor	Product	Version range	Fixed in
akuvox	c313w-2_firmware	—	—
akuvox	nc-2_firmware	—	—
akuvox	ns-2_firmware	—	—
akuvox	nx-2_firmware	—	—
akuvox	r20a-2_firmware	—	—
akuvox	r20k-2_firmware	—	—
akuvox	r29_firmware	—	—
akuvox	s532_firmware	—	—
akuvox	s539_firmware	—	—
akuvox	x912_firmware	—	—
akuvox	x915_firmware	—	—
akuvox	x916_firmware	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—

CVSS provenance

nvd v3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvd v4.0 8.7 HIGH CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-306