CVE-2017-14743
Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.
CVSS 3.0 · 8.1 High
EPSS 1.2%
KEV · Not listed
Vendors
Products