Lucene search

K

M1033-w Firmware Security Vulnerabilities

cve
cve

CVE-2018-10663

An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size...

7.5CVSS

9.4AI Score

0.004EPSS

2018-06-26 06:29 PM
38
cve
cve

CVE-2018-10664

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory...

7.5CVSS

9.3AI Score

0.013EPSS

2018-06-26 06:29 PM
91
cve
cve

CVE-2018-10659

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM...

7.5CVSS

9.1AI Score

0.006EPSS

2018-06-26 06:29 PM
48
cve
cve

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure...

9.8CVSS

9.3AI Score

0.09EPSS

2018-06-26 06:29 PM
90
In Wild
cve
cve

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or...

7.5CVSS

9.3AI Score

0.004EPSS

2018-06-26 06:29 PM
55
cve
cve

CVE-2018-10660

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command...

9.8CVSS

9.4AI Score

0.092EPSS

2018-06-26 06:29 PM
60
cve
cve

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access...

9.8CVSS

9.3AI Score

0.105EPSS

2018-06-26 06:29 PM
107
In Wild
cve
cve

CVE-2018-9157

An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attacker can upload a webshell by making a fileUpload.shtml request for a custom .shtml file, which is interpreted by the Apache HTTP Server mod_include...

7.5CVSS

8.1AI Score

0.003EPSS

2018-04-01 06:29 PM
26
cve
cve

CVE-2018-9158

An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from...

7.5CVSS

6.7AI Score

0.002EPSS

2018-04-01 06:29 PM
26