CVE-2015-8253

Published: Dec 27, 2015Modified: May 6, 2026

3.7

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive (1) message or (2) MJPEG video data by sniffing the network.

Affected (1)

Products: Rsi Video Technologies: Frontel Protocol

Rsi Video Technologies

1 product

Frontel Protocol

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rsi Video Technologies Frontel Protocol	Up to 2.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/

Source: cret@cert.org

Exploit

https://www.kb.cert.org/vuls/id/792004

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.kb.cert.org/vuls/id/792004

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.