The MERCURY MIPC252W camera is vulnerable to a remote denial of service attack that allows unauthenticated attackers to disrupt RTSP stream connectivity.

This vulnerability involves insufficient input validation within the RTSP parser, which can be triggered by an unauthenticated remote attacker. By sending a request with a Content-Length header but no corresponding message body, the attacker forces the service into a persistent waiting state that consumes subsequent data until a timeout occurs.

The exploitation of this flaw leads to a denial of service for the affected camera, rendering security monitoring feeds unavailable. While the CVSS score of 9.8 reflects a critical severity, the impact is primarily focused on service availability and the disruption of surveillance operations. If these devices are deployed in sensitive areas, the loss of visual data could compromise physical security protocols.

Immediate Action: There is currently no vendor-provided patch. Administrators should restrict access to the RTSP service by placing the device behind a secure VPN or firewall and limiting network access to trusted management IP addresses only.

Proactive Monitoring: Monitor network logs for unusual RTSP traffic patterns, specifically repeated connection attempts that result in server-side timeouts or unexpected connection resets.

Compensating Controls: Deploy a network-level firewall or an Intrusion Prevention System (IPS) to filter and drop malformed RTSP requests before they reach the camera interface.

Public Exploit Available: No (exploit_available: unknown)

Given the critical nature of this vulnerability and the lack of a vendor patch, immediate network isolation is required to minimize the attack surface. Organizations should prioritize moving these devices to segmented networks where they cannot be accessed by unauthorized external entities until a firmware update is released by the manufacturer.