OTPulse

Anjvision YSSD-RTMP-H5

Plan PatchCVSS 9.8ICS-CERT ICSA-26-272-05Sep 29, 2026
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

The Anjvision YSSD-RTMP-H5 streaming server (firmware 3.3.2.4_build_2024-12-26 and earlier) contains multiple critical remote code execution vulnerabilities including OS command injection (CWE-78), hardcoded credentials (CWE-798), insecure signature validation (CWE-347), and inadequate error handling (CWE-754, CWE-489). These weaknesses allow an unauthenticated attacker with network access to execute arbitrary OS-level commands, access user accounts and sensitive information, or take complete control of the device. The vendor has not responded to mitigation requests and has not released a patch.

What this means
What could happen
An attacker with network access to the device could execute arbitrary commands on the streaming server, potentially compromising stream integrity, accessing stored media or user credentials, or taking full control of the device to use it as a pivot point into your network.
Who's at risk
Water utilities and municipal electric systems using Anjvision YSSD-RTMP-H5 streaming servers for remote camera monitoring, facility surveillance, or operational video feeds. Any site relying on this device for security cameras, control room monitoring, or incident recording.
How it could be exploited
The device has multiple remote code execution vulnerabilities (CWE-78) and authentication weaknesses (CWE-798, hardcoded credentials, and CWE-347, signature validation flaws) that allow an unauthenticated attacker on the network to gain OS-level command execution without requiring any user interaction.
Prerequisites
  • Network access to the YSSD-RTMP-H5 device on TCP/HTTP ports
  • No authentication required for exploitation
remotely exploitableno authentication requiredlow complexityno patch availablemultiple critical weaknesses (RCE, hardcoded credentials, signature bypass)
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (1)
ProductAffected VersionsFix Status
YSSD-RTMP-H5 firmware: 3.3.2.4_build_2024-12-263.3.2.4 build 2024-12-26No fix (EOL)
Remediation & Mitigation
0/4
Do now
0/2
HARDENINGIsolate YSSD-RTMP-H5 devices on a dedicated vlan or network segment with firewall rules blocking inbound access from untrusted networks and the internet
WORKAROUNDRestrict network access to the YSSD-RTMP-H5 management interface to only authorized engineering workstations or management networks using firewall rules
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

HARDENINGContact Anjvision support directly to assess options for replacement, migration, or additional mitigations for this end-of-life product
Mitigations - no patch available
0/1
YSSD-RTMP-H5 firmware: 3.3.2.4_build_2024-12-26 has reached End of Life. The vendor will not release a patch. Apply the following compensating controls:
HARDENINGConsider decommissioning YSSD-RTMP-H5 devices and replacing with firmware-supported streaming equipment that receives regular security updates
View full CISA ICS-CERT advisory
API: /api/v1/advisories/d3b80c74-12fb-486c-9839-c8ef5d4cd435

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.

Anjvision YSSD-RTMP-H5 | CVSS 9.8 - OTPulse