Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.newCreate a CVE report
Check your stack
CVE-2026-70379

Unauthorized Access to vSolution Matrix RTSP

Products / packages WolfVision Cynap Pro, Cynap Core Pro

Published

Share

Severity and exploitation

Not in CISA KEV

KEV coverage does not rule out exploitation.

KEV checked 05/11/2026, 13:55:32 UTC
ENISA · CVSS:4.0 · 7.1
Assessment vectorCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
ENISA · CVSS:3.1 · 6.5
Assessment vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The headline uses the highest imported catalog score. Assessments can differ by source and CVSS version.

Severity

high7.1

CVSS measures technical severity, not the likelihood of an attack.

Known exploitation

Not listed in the checked CISA KEV catalog

Absence from CISA KEV does not rule out attacks.

Public exploit

Not established by this record

Missing evidence does not mean no public exploit exists.

Remediation

Source guidance available

Review the recorded instructions. Guidance may be a workaround rather than a fixed version.

What this means

The WolfVision Cynap Pro and Cynap Core Pro devices with vSolution Matrix feature enabled and version less than 1.78a may allow unauthorized access to the RTSP stream, potentially exposing screen content to unauthenticated hosts on the same network segment. The stream is not encrypted. An attacker with network access may view or capture presentation content.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

Attack conditions

This vulnerability only affects devices with the vSolution Matrix feature enabled.

Excerpt from the original source description below.

Review supporting sources →

Affected versions

Check the exact model, release, and any platform requirements against your installation.

WolfVision · ENISA

Cynap Pro, Cynap Core Pro

1 range
ENISA version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

0 → before 1.78a

custom versions

unaffected

unknown

Other versions: unaffected

Automatic dependency matching is unavailable for this record. Use the product evidence and publisher’s instructions to check your installation.

What to do

Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.

Until an update can be applied, consider the following measures where operationally feasible:

  • Disable the "vSolution Matrix" feature if it is not required.
  • Restrict vSolution Matrix to networks that contain only trusted Matrix stations.

If network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.

  • Outbound audio and video multicast from the device: UDP 5500-5503 by default.
  • On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.
  • If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.

WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.

ENISA guidance ↗

cve.new guidance unless attributed to a publisher. This page does not inspect your installation.

Public exploit evidence

No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.

Original source description

Read the full publisher description

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.

References

1 sources
wolfvision.com/de/security/cve-2026-70379-1
Vendor advisoryENISA

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-70379

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-319 ↗

CWE-319 Cleartext transmission of sensitive information

ENISA

Related →
Contributing organizations · 2
ENISA

Assigning organization

2026-10-26
CISA-ADP

Additional data publisher

2026-11-02

Timeline

All times UTC

  1. Advisory published

    Publication date supplied by the source.

  2. Source updated

    Latest modification date supplied by the source.

  3. Last imported by cve.new

    Latest catalog import, not the date we first saw this advisory.

What changed

Follow changes
  1. CVE · CVE-2026-70379

    Observed 2026-11-02T19:51:47.004Z · upstream updated 2026-11-02T19:43:05.667Z

    Prioritization updated

    before

    []

    after

    [
  {
    "source": "CISA-ADP",
    "type": "SSVC",
    "role": "CISA Coordinator",
    "timestamp": "2026-11-02T18:27:05.860278Z",
    "decisions": [
      {
        "name": "Exploitation",
        "value": "none"
      },
      {
        "name": "Automatable",
        "value": "no"
      },
      {
        "name": "Technical Impact",
        "value": "partial"
      }
    ]
  }
]

Large field values are marked as truncated previews. Original source snapshots remain retained.

Showing up to 50 most recent observed changes.