PT-2022-22194 · Digital Watchdog · Dw Megapix Ip Cameras

Secgrant · Published 2022-07-19 · Updated 2022-07-26 · CVE-2022-34535

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029

Description The issue allows unauthenticated attackers to view internal paths and scripts via web files.

Recommendations For version A7.2.2 20211029, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-34535

Affected Products

Dw Megapix Ip Cameras

References · 5

• https://osv.dev/vulnerability/CVE-2022-34535 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34535 · Security Note
• https://t.me/cibsecurity/46600 · Telegram Post
• https://gist.github.com/secgrant/820faeeaa0cb4889edaa1d6fef83deab · Note
• https://t.me/cvenotify/33429 · Telegram Post