CVE-2026-89175
MediumCVSS 5.3Summary
The Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
Risk Assessment
An unauthorized party can access protected intercom pages without logging in and retrieve system configuration details, facilitating further attacks and exposing device information.
Recommendation
Update the Smart Video Intercom software to a patched version and restrict access to the device interface to trusted networks only.
Other vulnerabilities in Smart Video Intercom System
See all- CVE-2026-89174High
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.
- CVE-2026-89173Medium
The Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Original NVD description (English source)
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.