What is GHSA-h8r5-qwmc-cvcp?

GHSA-h8r5-qwmc-cvcp is a security advisory published by GitHub Security Advisories with Medium severity. In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can...

Which CVE IDs does GHSA-h8r5-qwmc-cvcp cover?

GHSA-h8r5-qwmc-cvcp covers the following CVE IDs: CVE-2026-100297. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h8r5-qwmc-cvcp?

GHSA-h8r5-qwmc-cvcp has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-h8r5-qwmc-cvcpMediumCVSS 5.3

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can...

Vendor

GitHub Security Advisories

Published

September 29, 2026

Last Modified

September 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-100297 →

📋 Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-100297
https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05
https://github.com/advisories/GHSA-h8r5-qwmc-cvcp