119 matches found
PT-2019-13792
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description The issue allows an attacker to exploit OS Command Injection in the filename parameter for remote code execution as root. This occurs in the Mainproc executable file, which...
MicroDigital N-series cameras trust management issue vulnerability
MICRODIGITAL N-series cameras is a N-series network camera from MICRODIGITAL in Korea. A trust management issue vulnerability exists in the /usr/local/ipsca/mipsca.db file in MicroDigital N-series cameras using firmware version 6400.0.8.5 and earlier, which can be exploited by an attacker to gain...
PT-2019-13801
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description A cleartext password storage issue was discovered, allowing an attacker to gain access to passwords stored in the /usr/local/ipsca/mipsca.db file if a camera is compromised...
PT-2019-13791
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description A buffer overflow issue exists in a CGI program running under the HTTPD web server, specifically in the param parameter, which can lead to remote code execution in the conte...
PT-2019-13799
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description An issue was discovered in the firmware update process of the affected cameras, which is insecure and can lead to remote code execution. The attacker can provide arbitrary...
CVE-2019-14708: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the action parameter leads to remote code execution in the context of the nobody account...
CVE-2019-14707: Undefined Security Weakness
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI...
PT-2019-13800
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description A buffer overflow issue exists due to the action parameter, which can lead to remote code execution in the context of the nobody account. Recommendations For versions throug...
CVE-2019-14699: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can exploit OS Command Injection in the filename parameter for remote code execution as root. This occurs in the Mainproc executable file, which can be run from the HTTPD web server...
CVE-2019-14705: Improper Authentication
An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin...
PT-2019-13798
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description An issue with incorrect access control was found, allowing any valid cookie to be used for making requests as an administrator. Recommendations For versions through...
PT-2019-13796
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras with firmware through 6400.0.8.5 Description A CSRF issue was discovered in the HTTPD service, specifically affecting the "webparam?user&action=set¶m=add" API endpoint. This issue can be exploited to create an...
PT-2019-13797
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras firmware through 6400.0.8.5 Description A Server-Side Request Forgery SSRF issue was found in HTTPD on the affected cameras. This issue can be triggered via FTP commands when a newline character is included in the...
CVE-2019-14698: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running under the HTTPD web server, a buffer overflow in the param parameter leads to remote code execution in the context of the nobody account...
CVE-2019-14704: Server-Side Request Forgery (SSRF)
An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the uploadfile field...
PT-2019-5818
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras with firmware through 6400.0.8.5 Description The issue is related to a buffer overflow in memory, which can be exploited by an attacker to cause a denial of service. This can be achieved by uploading a file with a...
PT-2019-13793
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description The issue allows disclosure of the existence of arbitrary files via Path Traversal in HTTPD. This happens because the filename specified in the TZ parameter is accessed with...
PT-2019-13794
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description An issue allows an attacker to trigger read operations on arbitrary files via Path Traversal in the TZ parameter. Although the attacker cannot retrieve the data that is read...
CCTV DVR Login Scanning Utility
This module tests for standalone CCTV DVR video surveillance deployments specifically by MicroDigital, HIVISION, CTRing, and numerous other rebranded devices that are utilizing default vendor passwords. Additionally, this module has the ability to brute force user accounts. Such CCTV DVR video...