CVE-2022-34537

The CVE-2022-34537 entry concerns Digital Watchdog DW MEGApix IP cameras with firmware version A7.2.2_20211029, where a cross-site scripting (XSS) vulnerability exists in the bia_oneshot.cgi component. According to the provided data, the vulnerability is exploitable over network, has low privileg...

Digital Watchdog DW MEGApix IP 授权问题漏洞

Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP cameras version A7.2.220211029, which stems from a vulnerability that allows an attacker to access core log files and perform session hijacking via a crafted session...

Digital Watchdog DW MEGApix IP 操作系统命令注入漏洞

Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog USA. An operating system command injection vulnerability exists in Digital Watchdog DW MEGApix IP cameras version A7.2.220211029, which originates from a command injection contained in the component /admin/vca/license/licensetok.cgi...

Digital Watchdog DW MEGApix IP 跨站脚本漏洞

Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP cameras version A7.2.220211029, which stems from a security issue in the component biaoneshot.cgi...

Digital Watchdog DW MEGApix IP 授权问题漏洞

Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP cameras version A7.2.220211029, which originates from a vulnerability that allows an unauthenticated attacker to view internal paths and scripts via a web file...

CVE-2022-34535: Improper Authentication

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...

CVE-2022-34539: Improper Neutralization of Special Elements used in an OS Command

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34536: Session Fixation

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows attackers to access the core log file and perform session hijacking via a crafted session token...