Approved changes feed: RSS · Atom

cpe:2.3:o:alecto:ivm-100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAlecto (907e8275-c96a-5d8b-a7de-d6f6e06a029f)
ProductIvm 100 Firmware (d93e6e89-7ee3-5ddc-928d-b95971606a3c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20461 vulnerable 2026-06-08 05:13:40.661963 Details available
An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control video and audio services. The protocol has been partially reverse engineered. Based upon the reverse engineering, no password or username is ever transferred over this protocol. Thus, one can set up the camera connection feed with only the encoded UID. It is possible to set up sessions with the camera over the Internet by using the encoded UID and the custom UDP protocol, because authentication happens at the client side.
Published: 2024-11-07T00:00:00.000Z
Updated: 2025-11-04T17:12:03.542Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.