An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the ‘recdata.db’ file to call a specially crafted GoAhead ASP-file on the SD card.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19642
Reference (s):
- https://xn--sb-lka.org/cve/INSMA.txt