Sensitive Data Exposure in Smart Video Intercom System by Kingdom Communication Associated
CVE-2026-89173

6.9MEDIUM

Key Information:

Vendor: Kingdom Communication Associated
Status: Eh3040; Eh4200; Eh1000b; Eh2070
Vendor: CVE Published:; 11 September 2026

🔔 Create Kingdom Communication Associated Vulnerability Alert

What is CVE-2026-89173?

The Smart Video Intercom System by Kingdom Communication Associated is susceptible to a vulnerability that allows unauthenticated remote attackers to exploit sensitive data. By capitalizing on the discrepancies in system responses, attackers can enumerate valid user accounts, potentially compromising user privacy and security.

Affected Version(s)

EH1000B 0 < 2.7.0A

EH2070 0 < 2.8.0A

EH3040 0 < 2.5.0A

References

https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html

third-party-advisory

https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html

third-party-advisory

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 11, 2026
Vulnerability Reserved
Sep 11, 2026

CVE-2026-89173 Data

JSON