11 matches found
CVE-2022-34539
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34540
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34539: Improper Neutralization of Special Elements used in an OS Command
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...
PT-2022-22198 · Digital Watchdog · Dw Megapix Ip Cameras
Name of the Vulnerable Software and Affected Versions: Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description: A command injection issue was found in the /admin/curltest.cgi component. This issue can be exploited through a crafted POST request. Recommendations: For version...
PT-2022-22194
Name of the Vulnerable Software and Affected Versions Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029 Description The issue allows unauthenticated attackers to view internal paths and scripts via web files. Recommendations For version A7.2.2 20211029, at the moment, there is no...
Digital Watchdog DW MEGApix IP Cross-site Scripting Vulnerability
Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP cameras version A7.2.220211029, which stems from a security issue in the component biaoneshot.cgi...
Digital Watchdog DW MEGApix IP Operating System Injection Vulnerability
Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog USA. Digital Watchdog DW MEGApix IP cameras version A7.2.220211029 suffers from an operating system command injection vulnerability that stems from a security issue with the event, id, pluginname, name, and evtid parameters in the...
CVE-2022-34540: Improper Neutralization of Special Elements used in an OS Command
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34538: Improper Neutralization of Special Elements used in an OS Command
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request...
CVE-2022-34537: Improper Neutralization of Input During Web Page Generation
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...
CVE-2022-34535: Improper Authentication
Digital Watchdog DW MEGApix IP cameras A7.2.220211029 allows unauthenticated attackers to view internal paths and scripts via web files...