Lucene search
HistoryJul 19, 2022 - 8:15 p.m.
CVE-2022-34536
digital watchdog
megapix
ip cameras
vulnerability
session hijacking
log file access
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
51.4%
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session hijacking via a crafted session token.
Affected configurations
Node
dwmegapix_firmwareMatch4.2.0.32842
dwmegapixMatch-
Related
cve
cve
CVE-2022-34536
2022-07-19 20:15:11
prion
prion
Session fixation
2022-07-19 20:15:00
cvelist
cvelist
CVE-2022-34536
2022-07-19 19:03:55
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
51.4%
Related for NVD:CVE-2022-34536