Unauthorized Access to vSolution Matrix RTSP

{
  "id": "d5679dab79d67671c0a337cfc49005fc8fa6e9cff57eb692459597f64eecdf7a",
  "url": "https://www.cve.org/CVERecord?id=CVE-2026-70379",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Unauthorized Access to vSolution Matrix RTSP",
    "summary": "When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.",
    "evidence": "cve:CVE-2026-70379",
    "products": [
      {
        "name": {
          "value": "Cynap Pro, Cynap Core Pro",
          "evidence": "/containers/cna/affected/0/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-70379",
      "aliases": [
        "CVE-2026-70379"
      ],
      "metrics": [
        {
          "format": "CVSS",
          "cvssV4_0": {
            "Safety": "NOT_DEFINED",
            "version": "4.0",
            "Recovery": "NOT_DEFINED",
            "baseScore": 7.1,
            "Automatable": "NOT_DEFINED",
            "attackVector": "ADJACENT",
            "baseSeverity": "HIGH",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "exploitMaturity": "NOT_DEFINED",
            "providerUrgency": "NOT_DEFINED",
            "userInteraction": "NONE",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "privilegesRequired": "NONE",
            "subIntegrityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "subAvailabilityImpact": "NONE",
            "vulnAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "format": "CVSS",
          "cvssV3_1": {
            "scope": "UNCHANGED",
            "version": "3.1",
            "baseScore": 6.5,
            "attackVector": "ADJACENT_NETWORK",
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "integrityImpact": "NONE",
            "userInteraction": "NONE",
            "attackComplexity": "LOW",
            "availabilityImpact": "NONE",
            "privilegesRequired": "NONE",
            "confidentialityImpact": "HIGH"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "affected": [
        {
          "vendor": "WolfVision",
          "product": "Cynap Pro, Cynap Core Pro",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.78a",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ],
      "modified": "2026-10-26T17:48:55.829Z",
      "provider": "cve",
      "references": [
        "https://wolfvision.com/de/security/cve-2026-70379-1"
      ],
      "provider_metadata": {
        "cna": {
          "orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
          "shortName": "ENISA",
          "dateUpdated": "2026-10-26T17:48:55.829Z"
        }
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-70379",
        "evidence": "/cveMetadata/cveId"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/containers/cna/metrics"
  },
  "source_id": "core-cve",
  "document_id": 326405,
  "published_at": "2026-10-26T17:48:55.829+00:00"
}