TI-2017-10806 CVE-2017-14743 · GHSA-jm85-849j-wmxcFaleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the…Priority LOW 38Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.01219 · Published 2017-09-26 · No fix listed CWE-89