high8.1
CVE-2017-14743
Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrat…
Impact
Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Faleemi | Fsc-880 Firmware | Version 00.01.01.0048p2 |