Axis Network Camera Remote Command Execution Exploit

This Metasploit module exploits an authentication bypass in .srv functionality and a command injection in parhand to execute code as the root user. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModul...

CVE-2018-10661

creationtimestamp| type| source ---|---|--- 2018-07-25 19:52:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/axissrvparhandrce.rb 2018-07-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45100 2025-01-23 08:14:00+00:00| seen|...

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control...

CVE-2018-10661

Axis IP Cameras across multiple models are affected by CVE-2018-10661, which enables an authentication bypass of access control. The connected sources describe an exploit path where an unauthenticated request bypasses the .srv functionality, enabling unauthenticated access to the device bus via D...

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Axis Network Camera .srv-to-parhand RCE

This module exploits an auth bypass in .srv functionality and a command injection in parhand to execute code as the root user. Module Options msf use exploit/linux/http/axis/srvparhandrce msf undefinedsrvparhandrce show actions ...actions... msf undefinedsrvparhandrce set ACTION msf...