Port 554RTSP

The Real Time Streaming Protocol (RTSP) enables the control of streaming media servers, allowing clients to remotely control playback of media content such as video or audio streams in real time. Widely utilized in IP cameras and multimedia streaming solutions, RTSP facilitates commands like play, pause, and record, making it an essential component of streaming infrastructures..

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
2/10

safe

lookups
12,441

rank 311 of 993 · top 31%

Technical Details

what runs on :554

RTSP (Real Time Streaming Protocol) is a network control protocol used to establish and manage media sessions between endpoints, such as between surveillance cameras or media servers and clients. It operates at the application layer and is designed to control streaming media servers, providing functions similar to a remote control.

RTSP enables clients to issue commands like DESCRIBE, SETUP, PLAY, PAUSE, and TEARDOWN to media servers. This protocol simplifies the management of continuous media delivery, allowing dynamic control over the delivery of multimedia content. It supports both TCP and UDP as transport protocols, ensuring flexibility depending on network requirements or constraints.

Typically, RTSP works in conjunction with underlying protocols like RTP (Real-time Transport Protocol) for data delivery and RTCP (Real-Time Control Protocol) for control information. RTSP does not itself deliver the media stream but rather controls how it is sent from the server to the client, making it the signaling protocol in a streaming setup.

Security Information

exposure of :554

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

streaming averages 3.6 across 30 ports — this one sits 1.6 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • RTSP services often lack encryption, making streams susceptible to eavesdropping or interception.
  • Poorly configured RTSP servers may be vulnerable to authentication bypass, allowing unauthorized access to sensitive surveillance feeds.
  • RTSP open over the Internet can be prone to brute-force attacks targeting weak credentials.
  • Certain RTSP implementations have suffered from buffer overflow vulnerabilities that could enable remote code execution.

Common Mitigations:

  • Implement strong authentication mechanisms and complex credentials to protect RTSP services.
  • Employ network segmentation and firewall rules to limit RTSP traffic to trusted networks.
  • Use encrypted variants such as RTSPS where available to protect data in transit.
  • Keep RTSP server software updated with the latest security patches.
  • Consider VPNs or secure proxying to access RTSP streams remotely to prevent direct exposure to the Internet.

the 8 most looked-up other ports in streaming — 30 ports carry that label.

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted