PatchSiren

Zosi CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Zosi CVE published 2026-08-05

CVE-2025-70962

The Zosi C519M V4.2.8.823C01450BA device is vulnerable to Incorrect Access Control due to hardcoded credentials in the RTSP authentication mechanism. This vulnerability allows an attacker with network access to use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized viewing of camera footage. Security teams should be aware of this vulnerability and take necessar [truncated]