NVD disclosure day

Published threat advisories for August 23, 2024

CVE-2024-42531

Ezviz Camera Unauthenticated RTSP Stream Access.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An unauthenticated attacker could potentially access the live video stream of an Ezviz Internet PT Camera by crafting specific network packets to redirect the feed. While the vendor contends that actual video or audio data cannot be obtained, this vulnerability raises concerns about unauthorized remote surveillance if

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2024-40766

SonicWall SonicOS Management Access Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An improper access control vulnerability in SonicWall SonicOS could allow unauthorized resource access and system crashes. This impacts SonicWall firewall devices. Business risk includes potential disruption and unauthorized data access.

NVD modified: NVD date unavailable • CISA KEV