CVE-2021-31793: Nightowlsp Wdb-20 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via the /snapshot URI.

Affected products

• Nightowlsp Wdb-20 Firmware: version 20190314 only

Published 2021-05-06. Last modified 2026-06-17.