CVE-2019-14698
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running under the HTTPD web server, a buffer overflow in the param parameter leads to remote code execution in the context of the nobody account.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2019-08-06
- Last modified
- 2024-08-05
- Weaknesses
- CWE-119
Affected products
- Mdc-n2190v Firmware (Microdigital)
- Mdc-n4090 Firmware (Microdigital)
- Mdc-n4090w Firmware (Microdigital)
References
- http://www.microdigital.co.kr/
- https://pastebin.com/PSyqqs1g
- https://www.microdigital.ru/