🔐 CVE Alert

CVE-2026-89174

HIGH 7.5

Kingdom Communication Associated|Smart Video Intercom System - Missing Burte-force Protection

CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.

CWE CWE-307
Vendor kingdom communication associated
Product eh3040
Published Sep 11, 2026
Last Updated Sep 11, 2026
Stay Ahead of the Next One

Get instant alerts for kingdom communication associated eh3040

Be the first to know when new high vulnerabilities affecting kingdom communication associated eh3040 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected Versions

Kingdom Communication Associated / EH3040
0 < 2.5.0A
Kingdom Communication Associated / EH4200
0 < 2.5.0A
Kingdom Communication Associated / EH1000B
0 < 2.7.0A
Kingdom Communication Associated / EH2070
0 < 2.8.0A

References

NVD ↗ CVE.org ↗ EPSS Data ↗
twcert.org.tw: https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html twcert.org.tw: https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html