CVE-2022-34538

HIGH

dw megapix_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2022-34538 has a selected CVSS score of 8.8 (high).

Description

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 6, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

megapix_firmware

Browse dw / megapix_firmware
VulnCheckVersion data not supplied

References

2