HIGH
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5
Published Aug 6, 2019
7.2
HIGHCVSS 3.0
EPSS 3.01%
Description
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI.
Affected products
No data.
Configuration 1
AND
- ≤ 6400.0.8.5
Running on/with
- n/a
Configuration 2
AND
- ≤ 6400.0.8.5
Running on/with
- n/a
Configuration 3
AND
- ≤ 6400.0.8.5
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (4)
- http://www.microdigital.co.kr/ x_refsource_MISCVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5857 Advisory
- https://pastebin.com/PSyqqs1g x_refsource_MISCThird Party Advisory
- https://www.microdigital.ru/ x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.microdigital.co.kr/ | x_refsource_MISCVendor Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5857 | Advisory | |
| https://pastebin.com/PSyqqs1g | x_refsource_MISCThird Party Advisory | |
| https://www.microdigital.ru/ | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 6, 2019
Updated Aug 5, 2024
Reserved Aug 6, 2019
Link CVE-2019-14707
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-5857 Assigner mitre
Published Aug 6, 2019
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2019-5857