CVE-2004-0334: InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) video...

Security readout for executives and security teams

CVE-2004-0334 is an authentication-bypass issue in InnoMedia VideoPhone. A remote user may be able to reach administrative, system configuration, upgrade, or control pages without valid Basic Authorization because of URL path handling. Business risk depends heavily on whether any legacy VideoPhone management interfaces remain reachable. Exposure is most likely on legacy InnoMedia VideoPhone devices with HTTP management interfaces reachable from user networks, partner networks, or the internet. Exact affected versions are not identified in the sources. Treat as a legacy exposure discovery item. It can matter if old devices are still deployed, but urgency cannot be reliably ranked without asset presence, reachability, and vendor remediation data. Mitigation focus: Inventory environments for InnoMedia VideoPhone devices and exposed HTTP management interfaces.; Restrict management access to trusted administrative networks or VPN paths.; Check vendor or archival guidance for firmware updates or configuration mitigations..

Prepared

Jun 30, 2026, 06:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.