CVE-2026-89173— Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure
Quick assessment
Affected
Kingdom Communication Associated EH3040
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kingdom Communication 公司开发的智能视频对讲系统存在敏感数据暴露漏洞。未经身份验证的远程攻击者可以通过利用系统响应的差异来枚举有效的用户账户。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89173
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure
Source: CVE Program / CVE List V5
Vulnerability Description
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
响应差异性信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kingdom Communication Associated | EH3040 | 0 ~ 2.5.0A | - |
|
| Kingdom Communication Associated | EH4200 | 0 ~ 2.5.0A | - |
|
| Kingdom Communication Associated | EH1000B | 0 ~ 2.7.0A | - |
|
| Kingdom Communication Associated | EH2070 | 0 ~ 2.8.0A | - |
|
II. Public POCs for CVE-2026-89173
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89173
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-89173 (2)
-
🔗 鎧鋒企業｜智慧對講系統 - 存在3個漏洞-TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報 third-party-advisory
-
Same Patch Batch · Kingdom Communication Associated · 2026-09-11 · 3 CVEs total
| CVE-2026-89174 | 7.5 HIGH | Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protect |
| CVE-2026-89175 | 5.3 MEDIUM | Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication |
IV. Related Vulnerabilities
Same weakness: CWE-204
-
CVE-2026-9161
User Enumeration in DernekPlus' Website Template -
CVE-2026-86758
Snipe-IT before 8.7.0 License Key Exposure via CSV Export -
CVE-2026-19205
User Enumeration in GastroMenum's GastroMenum Web Panel -
CVE-2026-19080
Username Enumeration in Menulux Software's Menulux Portal -
CVE-2026-78584
Observable Response Discrepancy in Kibana Leading to Cross-S
V. Comments for CVE-2026-89173
No comments yet