Approved changes feed: RSS · Atom

cpe:2.3:o:microdigital:mdc-n4090w_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMicrodigital (cec63486-e75c-5df9-af9e-4eb61b3db48d)
ProductMdc N4090W Firmware (d355313e-bf71-5e32-90e7-c4b3cf91b922)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14709 vulnerable 2026-06-08 05:12:55.926644 Details available
A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The file in question is /usr/local/ipsca/mipsca.db. If a camera is compromised, the attacker can gain access to passwords and abuse them to compromise further systems.
Published: 2019-08-06T22:21:16.000Z
Updated: 2024-08-05T00:26:38.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14708 vulnerable 2026-06-08 05:12:55.926193 Details available
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the action parameter leads to remote code execution in the context of the nobody account.
Published: 2019-08-06T22:21:40.000Z
Updated: 2024-08-05T00:26:37.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14707 vulnerable 2026-06-08 05:12:55.925551 Details available
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI.
Published: 2019-08-06T22:23:19.000Z
Updated: 2024-08-05T00:26:38.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14706 vulnerable 2026-06-08 05:12:55.924996 Details available
A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker without authorization can upload a file to upload.php with a filename longer than 256 bytes. This will be placed in the updownload area. It will not be deleted, because of a buffer overflow in a Bash command string.
Published: 2019-08-06T22:23:55.000Z
Updated: 2024-08-05T00:26:39.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14705 vulnerable 2026-06-08 05:12:55.924433 Details available
An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin.
Published: 2019-08-06T22:24:09.000Z
Updated: 2024-08-05T00:26:37.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14704 vulnerable 2026-06-08 05:12:55.923790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14703 vulnerable 2026-06-08 05:12:55.923342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14702 vulnerable 2026-06-08 05:12:55.922883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14701 vulnerable 2026-06-08 05:12:55.922353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14700 vulnerable 2026-06-08 05:12:55.921802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14699 vulnerable 2026-06-08 05:12:55.921226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14698 vulnerable 2026-06-08 05:12:55.918760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.