CVE-2020-9349: Cacagoo Tv-288zd-2mp Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password.

Affected products

• Cacagoo Tv-288zd-2mp Firmware: version 3.4.2.0919 only

Published 2020-04-02. Last modified 2026-06-17.