CVE-2026-61514

Summary

The flaw allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456, leading to unauthorized access to live video streams and control of device features.

Exploitability

Exploitation is relatively straightforward as attackers only need to send protocol-conforming packets without credentials. Precondition is access to the TCP port 23456.

Blast radius

If exploited, attackers can gain full control over the device, including accessing live video streams and controlling device functions, leading to significant privacy and security risks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to TCP port 23456.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.