CVE-2019-14702

CVE-2019-14702 describes multiple critical SQL injection vulnerabilities affecting MicroDigital N-series cameras with firmware through 6400.0.8.5. These flaws, present in 13 HTTPD-reachable forms, allow an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to full compromise, including creating administrative accounts. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, resulting in high impacts to confidentiality, integrity, and availability. Despite its severity, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is there evidence of active exploitation or significant community discussion.