A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker without authorization can upload a file to upload.php with a filename longer than 256 bytes. This will be placed in the updownload area. It will not be deleted, because of a buffer overflow in a Bash command string.
References
Link | Resource |
---|---|
http://www.microdigital.co.kr/ | Vendor Advisory |
https://pastebin.com/PSyqqs1g | Third Party Advisory |
https://www.microdigital.ru/ | Vendor Advisory |
http://www.microdigital.co.kr/ | Vendor Advisory |
https://pastebin.com/PSyqqs1g | Third Party Advisory |
https://www.microdigital.ru/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
21 Nov 2024, 04:27
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.microdigital.co.kr/ - Vendor Advisory | |
References | () https://pastebin.com/PSyqqs1g - Third Party Advisory | |
References | () https://www.microdigital.ru/ - Vendor Advisory |
Information
Published : 2019-08-06 23:15
Updated : 2024-11-21 04:27
NVD link : CVE-2019-14706
Mitre link : CVE-2019-14706
CVE.ORG link : CVE-2019-14706
JSON object : View
Products Affected
microdigital
- mdc-n4090w
- mdc-n4090
- mdc-n2190v
- mdc-n4090w_firmware
- mdc-n4090_firmware
- mdc-n2190v_firmware
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer