CVE-2019-14702

CRITICAL

MicroDigital N-series <6400.0.8.5 - SQL Injection

Title source: llm
STIX 2.1

Description

An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. SQL injection vulnerabilities exist in 13 forms that are reachable through HTTPD. An attacker can, for example, create an admin account.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://www.microdigital.ru/
Vendor Advisory x_refsource_misc
http://www.microdigital.co.kr/
Third Party Advisory x_refsource_misc
https://pastebin.com/PSyqqs1g

Scores

CVSS v3 9.8
EPSS 0.0166
EPSS Percentile 74.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (3)
microdigital/mdc-n2190v_firmware < 6400.0.8.5
microdigital/mdc-n4090_firmware < 6400.0.8.5
microdigital/mdc-n4090w_firmware < 6400.0.8.5
Published Aug 06, 2019
Tracked Since Feb 18, 2026