CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2022-28860
https://notcve.org/view.php?id=CVE-2022-28860
An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to achieve HTTP access to the camera. Una disminución de la autenticación en el servidor en Citilog versión 8.0, permite a un atacante (en una posición de tipo man in the middle entre el servidor y su cámara inteligente Axis M1125) conseguir acceso HTTP a la cámara • https://github.com/ErwanBroquaire/citilog-8.0-vulnerability https://www.citilog.com https://www.citilog.com/wp-content/uploads/2023/07/CitilogSAS_information_note_2021-10-18-English.pdf •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2022-28861
https://notcve.org/view.php?id=CVE-2022-28861
The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP credentials in a cleartext HTTP traffic. These can be used for FTP access to the server. El servidor en Citilog versión 8.0, permite a un atacante (en una posición de tipo man in the middle entre el servidor y su cámara inteligente Axis M1125) visualizar las credenciales FTP en un tráfico HTTP de texto sin cifrar. Éstas pueden usarse para acceder al servidor por FTP • https://github.com/ErwanBroquaire/citilog-8.0-vulnerability https://www.citilog.com https://www.citilog.com/wp-content/uploads/2023/07/CitilogSAS_information_note_2021-10-18-English.pdf • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 10.0EPSS: 10%CPEs: 780EXPL: 2CVE-2018-10661 – Axis Network Camera - .srv to parhand Remote Code Execution
https://notcve.org/view.php?id=CVE-2018-10661
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. Se ha descubierto un problema en múltiples modelos de las cámaras IP Axis. Existe una omisión de control de acceso. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://www.exploit-db.com/exploits/45100 https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf •
CVSS: 7.5EPSS: 0%CPEs: 780EXPL: 1CVE-2018-10659 – Axis Cameras Authorization Bypass / Unrestricted Access / Command Injection
https://notcve.org/view.php?id=CVE-2018-10659
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction. Se ha descubierto un problema de corrupción de memoria en múltiples modelos de las cámaras IP Axis que provoca una denegación de servicio (cierre inesperado) mediante el envío de un comando manipulado, lo que provoca que una ruta de código llame a la instrucción ARM UND indefinida. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 780EXPL: 1CVE-2018-10664 – Axis Cameras Authorization Bypass / Unrestricted Access / Command Injection
https://notcve.org/view.php?id=CVE-2018-10664
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption. Se ha descubierto un problema en el proceso httpd en múltiples modelos de las cámaras IP Axis. Existe corrupción de memoria. Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities. • https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras https://www.axis.com/files/faq/Advisory_ACV-128401.pdf https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •