PT-2022-22195
CVE-2022-34536
·
Published
2022-07-19
·
Updated
2022-07-27
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029
Description
The issue allows attackers to access the core log file and perform session hijacking via a crafted session token.
Recommendations
For Digital Watchdog DW MEGApix IP cameras version A7.2.2 20211029, as a temporary workaround, consider restricting access to the core log file until a patch is available. Avoid using crafted session tokens in the affected system until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾