CVE-2026-89174— Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection
Quick assessment
Affected
Kingdom Communication Associated EH3040
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kingdom Communication 公司开发的智能视频门禁系统（Smart Video Intercom System）存在暴力破解保护缺失（Missing Brute-force Protection）漏洞。未经身份验证的远程攻击者可通过大量登录尝试，利用该漏洞获取有效账户的访问权限。
Possible ATT&CK Techniques 1 AI
T1110 · Brute Force
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89174
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection
Source: CVE Program / CVE List V5
Vulnerability Description
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
过多认证尝试的限制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kingdom Communication Associated | EH3040 | 0 ~ 2.5.0A | - |
|
| Kingdom Communication Associated | EH4200 | 0 ~ 2.5.0A | - |
|
| Kingdom Communication Associated | EH1000B | 0 ~ 2.7.0A | - |
|
| Kingdom Communication Associated | EH2070 | 0 ~ 2.8.0A | - |
|
II. Public POCs for CVE-2026-89174
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89174
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-89174 (2)
-
🔗 鎧鋒企業｜智慧對講系統 - 存在3個漏洞-TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報 third-party-advisory
-
Same Patch Batch · Kingdom Communication Associated · 2026-09-11 · 3 CVEs total
| CVE-2026-89173 | 5.3 MEDIUM | Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure |
| CVE-2026-89175 | 5.3 MEDIUM | Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication |
IV. Related Vulnerabilities
V. Comments for CVE-2026-89174
No comments yet