CVE-2022-34538: Dw Megapix Firmware

High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request.

Affected products

• Dw Megapix Firmware: version 4.2.0.32842 only

Published 2022-07-19. Last modified 2026-06-17.