Lucene search
HistoryJul 19, 2022 - 8:15 p.m.
CVE-2022-34536
cve-2022-34536
digital watchdog
ip cameras
vulnerability
access control
session hijacking
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.4%
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session hijacking via a crafted session token.
Affected configurations
Node
dwmegapix_firmwareMatch4.2.0.32842
dwmegapixMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| dw:megapix_firmware | dw megapix firmware | eq | 4.2.0.32842 |
Social References
More
Related
prion
prion
Session fixation
2022-07-19 20:15:00
cvelist
cvelist
CVE-2022-34536
2022-07-19 19:03:55
nvd
nvd
CVE-2022-34536
2022-07-19 20:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.4%
Related for CVE-2022-34536