CVE-2019-20464

CVE-2019-20464 describes an unauthenticated video stream access vulnerability affecting Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. While the primary mobile application streaming is password-protected, other streaming services, specifically via the RTSP port, lack authentication, allowing an attacker to view the video feed without credentials. This is a high-severity vulnerability (CVSS 7.5) with a low attack complexity and no user interaction required, potentially leading to unauthorized disclosure of sensitive information. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.