Lucene search

K

M1033-W Firmware Security Vulnerabilities

cve
cve

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar.

7.5CVSS

8.4AI Score

0.004EPSS

2018-06-26 06:29 PM
57
cve
cve

CVE-2018-10659

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.

7.5CVSS

8.3AI Score

0.006EPSS

2018-06-26 06:29 PM
50
cve
cve

CVE-2018-10660

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

9.8CVSS

9.4AI Score

0.092EPSS

2018-06-26 06:29 PM
64
cve
cve

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.

9.8CVSS

9.3AI Score

0.105EPSS

2018-06-26 06:29 PM
111
In Wild
cve
cve

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.

9.8CVSS

9.3AI Score

0.09EPSS

2018-06-26 06:29 PM
96
In Wild
cve
cve

CVE-2018-10663

An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation.

7.5CVSS

8.5AI Score

0.004EPSS

2018-06-26 06:29 PM
44
cve
cve

CVE-2018-10664

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption.

7.5CVSS

8.5AI Score

0.013EPSS

2018-06-26 06:29 PM
97
cve
cve

CVE-2018-9157

An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include mo...

7.5CVSS

8.1AI Score

0.003EPSS

2018-04-01 06:29 PM
26
cve
cve

CVE-2018-9158

An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from att...

7.5CVSS

7.4AI Score

0.002EPSS

2018-04-01 06:29 PM
28