Path Traversal in Microdigital Mdc-N2190v
CVE-2019-14701
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can trigger read operations on an arbitrary file via Path Traversal in the TZ parameter, but cannot retrieve the data that is read. This causes a denial of service if the filename is, for example, /dev/random.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-14701?
- CVE-2019-14701 is a high-severity vulnerability in Microdigital Mdc-N2190v, classified under Path Traversal. CVSS score: 7.5/10. Published 2019-08-06.
- How severe is CVE-2019-14701?
- High severity. CVSS v3 base score is 7.5 out of 10.