CVE-2019-25236 - iSeeQ Hybrid DVR WH-H4 1.03R Unauthenticated Live Stream Disclosure

Back Back to CVE browser

HIGH

iSeeQ Hybrid DVR WH-H4 1.03R Unauthenticated Live Stream Disclosure

Published Dec 24, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.45%

Description

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/get_jpeg endpoint without authentication.

Affected products

Vendor iSeeQ Product Hybrid DVR WH-H4 Default
n/a
- Version
  1.03R
  Status
  affected
  Constraints
  -
- Version
  2.0.0.P
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

iSeeQ

Hybrid DVR WH-H4

n/a

Version	Status	Constraints
1.03R	affected	-
2.0.0.P	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

http://www.iseeq.co.kr
product
https://www.exploit-db.com/exploits/47562
exploit
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5539.php
exploitthird-party-advisory

Link	Providers	Tags
http://www.iseeq.co.kr		product
https://www.exploit-db.com/exploits/47562		exploit
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5539.php		exploitthird-party-advisory