CVE-2022-34540

CVE-2022-34540 affects Digital Watchdog DW MEGApix IP cameras (version A7.2.2_20211029). The vulnerable component is /admin/vca/license/license_tok.cgi, with a command-injection flaw exploitable via a crafted POST request. Affected product behavior and impact are described in multiple sources; PT...

PT-2022-22194

Name of the Vulnerable Software and Affected Versions Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description The issue allows unauthenticated attackers to view internal paths and scripts via web files. Recommendations For version A7.2.2 20211029, at the moment, there is no...

CVE-2022-34538: Improper Neutralization of Special Elements used in an OS Command

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34536: Session Fixation

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows attackers to access the core log file and perform session hijacking via a crafted session token...

CVE-2022-34539: Improper Neutralization of Special Elements used in an OS Command

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...

PT-2022-22195

Name of the Vulnerable Software and Affected Versions Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description The issue allows attackers to access the core log file and perform session hijacking via a crafted session token. Recommendations For Digital Watchdog DW MEGApix IP...

PT-2022-22196

Name of the Vulnerable Software and Affected Versions Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description A cross-site scripting XSS issue was found in the bia oneshot.cgi component. This allows for potential malicious script execution. Recommendations For version A7.2.2...

CVE-2022-34540: Improper Neutralization of Special Elements used in an OS Command

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34537: Improper Neutralization of Input During Web Page Generation

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...

CVE-2022-34535: Improper Authentication

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...