CVE-2019-14704

An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the uploadfile field.
References
Link Resource
https://pastebin.com/PSyqqs1g Third Party Advisory
http://www.microdigital.co.kr/ Vendor Advisory
https://www.microdigital.ru/ Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:microdigital:mdc-n4090_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:microdigital:mdc-n4090:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:microdigital:mdc-n4090w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:microdigital:mdc-n4090w:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:microdigital:mdc-n2190v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:microdigital:mdc-n2190v:-:*:*:*:*:*:*:*

Information

Published : 2019-08-06 16:15

Updated : 2019-08-14 10:03


NVD link : CVE-2019-14704

Mitre link : CVE-2019-14704


JSON object : View

CWE
CWE-918

Server-Side Request Forgery (SSRF)

Advertisement

dedicated server usa

Products Affected

microdigital

  • mdc-n2190v_firmware
  • mdc-n4090w_firmware
  • mdc-n2190v
  • mdc-n4090
  • mdc-n4090_firmware
  • mdc-n4090w