CVE-2022-40785

2022-09-2614:57:22

mitre

www.cve.org

remote code execution

unsanitized input

mipc camera firmware

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This allows an attacker to gain remote code execution on cameras running the firmware when a victim logs into a specially crafted mobile app.

References

hackmd.io/%40_zOX-PXQQFmCETA_RZIgow/BkOhIU1oc