Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-25748 — Documentation of CVE-2020-25748: Cleartext transmission vulnerability in Rubetek IP cameras allowing MITM interception and modification of video data, NTP, and RTSP responses. | Kitploit
Tools/GitHubGitHub/jet-pentest/cve-2020-25748
Embedded Systems SecurityIoT SecurityVulnerability AnalysisExploitationNetwork SecurityHardware Security
GitHubjet-pentest/cve-2020-25748

CVE-2020-25748

Documentation of CVE-2020-25748: Cleartext transmission vulnerability in Rubetek IP cameras allowing MITM interception and modification of video data, NTP, and RTSP responses.

View Repository
1246 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-25748

[Suggested description] A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.

[Additional Information] A letter was sent to the vendor about the vulnerability.

[VulnerabilityType Other] CWE-319: Cleartext Transmission of Sensitive Information

[Vendor of Product] Rubetek (https://rubetek.com/)

[Affected Product Code Base] Camera RV-3406 - Firmware version 339 and 342 are affected. There are no fixed versions Camera RV-3409 - Firmware version 339 and 342 are affected. There are no fixed versions Camera RV-3411 - Firmware version 339 and 342 are affected. There are no fixed versions

[Affected Component] RTP service, NTP client, DNS client

[Attack Type] Remote

[Impact Denial of Service] true

[Impact Information Disclosure] true

[Attack Vectors] Someone in the middle can intercept and modify the video data from the camera. You can also modify responses from NTP and RTSP servers and force the camera to use the changed values.

[Discoverer] Sergey Zelensky (Jet Infosystems, jet.su)

[Reference] https://jet.su

Download Tool