CVE-2019-14705

An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin.
References
Link Resource
https://pastebin.com/PSyqqs1g Third Party Advisory
http://www.microdigital.co.kr/ Vendor Advisory
https://www.microdigital.ru/ Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:microdigital:mdc-n4090_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:microdigital:mdc-n4090:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:microdigital:mdc-n4090w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:microdigital:mdc-n4090w:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:microdigital:mdc-n2190v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:microdigital:mdc-n2190v:-:*:*:*:*:*:*:*

Information

Published : 2019-08-06 16:15

Updated : 2020-08-24 10:37


NVD link : CVE-2019-14705

Mitre link : CVE-2019-14705


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

microdigital

  • mdc-n2190v_firmware
  • mdc-n4090w_firmware
  • mdc-n2190v
  • mdc-n4090
  • mdc-n4090_firmware
  • mdc-n4090w