An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin.
References
Link | Resource |
---|---|
https://pastebin.com/PSyqqs1g | Third Party Advisory |
http://www.microdigital.co.kr/ | Vendor Advisory |
https://www.microdigital.ru/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Information
Published : 2019-08-06 16:15
Updated : 2020-08-24 10:37
NVD link : CVE-2019-14705
Mitre link : CVE-2019-14705
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
microdigital
- mdc-n2190v_firmware
- mdc-n4090w_firmware
- mdc-n2190v
- mdc-n4090
- mdc-n4090_firmware
- mdc-n4090w