CVSS: 7.5EPSS: 1%CPEs: 780EXPL: 1CVE-2018-10664 – Axis Cameras Authorization Bypass / Unrestricted Access / Command Injection
https://notcve.org/view.php?id=CVE-2018-10664
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption. Se ha descubierto un problema en el proceso httpd en múltiples modelos de las cámaras IP Axis. Existe corrupción de memoria. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 780EXPL: 1CVE-2018-10658 – Axis Cameras Authorization Bypass / Unrestricted Access / Command Injection
https://notcve.org/view.php?id=CVE-2018-10658
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar. Se ha descubierto un problema de corrupción de memoria en múltiples modelos de las cámaras IP Axis que provoca una denegación de servicio (cierre inesperado). El cierre inesperado proviene del código dentro del objeto compartido libdbus-send.so o similar. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 9%CPEs: 780EXPL: 2CVE-2018-10662 – Axis Network Camera - .srv to parhand Remote Code Execution
https://notcve.org/view.php?id=CVE-2018-10662
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface. Se ha descubierto un problema en múltiples modelos de las cámaras IP Axis. Existe una interfaz no segura expuesta. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://www.exploit-db.com/exploits/45100 https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf •
CVSS: 7.5EPSS: 0%CPEs: 780EXPL: 1CVE-2018-10663 – Axis Cameras Authorization Bypass / Unrestricted Access / Command Injection
https://notcve.org/view.php?id=CVE-2018-10663
An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation. Se ha descubierto un problema en múltiples modelos de las cámaras IP Axis. Existe un cálculo de tamaño incorrecto. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 9%CPEs: 780EXPL: 2CVE-2018-10660 – Axis Network Camera - .srv to parhand Remote Code Execution
https://notcve.org/view.php?id=CVE-2018-10660
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection. Se ha descubierto un problema en múltiples modelos de las cámaras IP Axis. Existe inyección de comandos Shell. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://www.exploit-db.com/exploits/45100 https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •