Multiple Critical Vulnerabilities in Anjvision YSSD-RTMP-H5 Firmware

The Anjvision YSSD-RTMP-H5 device, commonly deployed in commercial facilities globally, contains multiple critical security vulnerabilities within firmware version 3.3.2.4_build_2024-12-26. These flaws, tracked as CVE-2026-100291 through CVE-2026-100299, collectively enable a range of malicious activities including unauthenticated access to device management, command injection, and firmware manipulation. The vulnerabilities stem from systemic security weaknesses such as insecure default configurations, lack of cryptographic verification for firmware updates, and the presence of hard-coded credentials and active debug interfaces. Anjvision has not provided a patch or remediation plan for these issues. Defenders should treat these devices as compromised if internet-exposed and prioritize network-level isolation or restrictive firewalling, as there is currently no path to secure the devices through vendor-provided updates.

Impact

Successful exploitation of these vulnerabilities allows unauthenticated remote attackers to achieve OS-level command execution, intercept sensitive data, or fully take over the affected hardware. Given the deployment in commercial facilities, the impact includes potential loss of visibility, unauthorized control over physical security monitoring systems, and the ability to pivot into wider internal networks if the device is not properly segmented.

Recommendation

• Implement strict network segmentation to ensure Anjvision YSSD-RTMP-H5 devices are not reachable from the public internet or untrusted network segments.
• Block all unsolicited inbound traffic to known management ports (e.g., ONVIF services) associated with these devices at the network perimeter.
• Audit outbound traffic from these devices to prevent potential exploitation of the identified SSRF vulnerability and unauthorized cloud service interaction.
• Given the lack of vendor-provided patches, consider phasing out these devices from production environments where data integrity or system availability is critical.