CVE-2018-17558: Use of Hard-coded Credentials

Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03...

CVE-2023-26609: Undefined Security Weakness

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wirelessmft ap field...

CVE-2013-2568: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wirelessmft.cgi, which could let a remote malicious user execute arbitrary code...

PT-2020-7392

Name of the Vulnerable Software and Affected Versions: Zavio IP Cameras versions 1.6.3 and earlier Description: A Command Injection issue exists via the ap parameter to "/cgi-bin/mft/wireless mft.cgi" API endpoint, which could let a remote malicious user execute arbitrary code. Recommendations: F...

CVE-2013-2573: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...