Description
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the action parameter leads to remote code execution in the context of the nobody account.
References (3)
Core 3
Core References
Product, Vendor Advisory x_refsource_misc
https://www.microdigital.ru/
Vendor Advisory x_refsource_misc
http://www.microdigital.co.kr/
Third Party Advisory x_refsource_misc
https://pastebin.com/PSyqqs1g
Scores
CVSS v3
9.8
EPSS
0.0446
EPSS Percentile
90.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (3)
microdigital/mdc-n2190v_firmware
< 6400.0.8.5
microdigital/mdc-n4090_firmware
< 6400.0.8.5
microdigital/mdc-n4090w_firmware
< 6400.0.8.5
Published
Aug 06, 2019
Tracked Since
Feb 18, 2026