Megapix Firmware vulnerabilities
4 known vulnerabilities in Megapix Firmware from Dw. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Megapix Firmware: Improper Neutralization of Special Elements used in an OS Command
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/license_tok.cgi. This vulnerability is exploitable via a crafted POST request.
- 8.8 High severity
Megapix Firmware: Improper Neutralization of Special Elements used in an OS Command
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request.
- 8.8 High severity
Megapix Firmware: Improper Neutralization of Special Elements used in an OS Command
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request.
- 7.5 High severity
Megapix Firmware: Session Fixation
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session hijacking via a crafted session token.