CVE-2024-46959: Runofast Cloudcam Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audio stream.

Affected products

• Runofast Cloudcam Firmware: version 57.0.0.1 only

Published 2024-09-18. Last modified 2026-06-17.