Memory corruption

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service crash by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction...

CVE-2018-10663

An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation...

CVE-2018-10660

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection...

Design/Logic Flaw

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface...

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

CVE-2018-10662

CVE-2018-10662 affects Axis IP Cameras, described as an Exposed Insecure Interface. Connected sources document a multi-stage exploit path: an unauthenticated bypass of .srv functionality enabling a Parhand DBus command flow, leading to potential root command execution (Metasploit module and Explo...

CVE-2018-10661

Axis IP Cameras across multiple models are affected by CVE-2018-10661, which enables an authentication bypass of access control. The connected sources describe an exploit path where an unauthenticated request bypasses the .srv functionality, enabling unauthenticated access to the device bus via D...

CVE-2018-10658

Axis IP Cameras are affected by a memory corruption vulnerability (CVE-2018-10658) that can cause a denial of service (crash) via code paths involving libdbus-send.so or similar. Reports describe exploitation potential through the device’s dbus interfaces, with root-level access scenarios describ...

CVE-2018-10659

Axis IP Cameras are affected by CVE-2018-10659, a memory corruption vulnerability in the camera’s software path that can cause a denial of service (crash) when a crafted command triggers an undefined ARM instruction. The issue is documented across multiple sources (NVD/NIST, Axis advisory materia...

CVE-2018-10659

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service crash by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction...

CVE-2018-10664

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption...

CVE-2018-10664

Axis IP Cameras running firmware with Axis httpd service are affected by CVE-2018-10664 due to memory corruption in the httpd process. The issue is documented as a memory corruption vulnerability in Axis IP Camera devices. ThreatPost describes a broader chain of vulnerabilities in Axis cameras th...

CVE-2018-10663

Axis IP Cameras (multiple models) are affected by CVE-2018-10663, described as an Incorrect Size Calculation leading to information exposure. Public reports and Nessus/OpenVAS entries corroborate additional related vulns in the same product family. Remediation: update to Axis firmware via Axis De...

CVE-2018-10660

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection...

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control...

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface...

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Foscam Issues Patches For Vulnerabilities in IP Cameras

Foscam is urging customers to update their security cameras after researchers found three vulnerabilities in that could enable a bad actor to gain root access knowing only the camera’s IP address. The vulnerability trifecta includes an arbitrary file-deletion bug, a shell command-injection flaw a...

BACKDOOR IN SONY IPELA ENGINE IP CAMERAS

EC Consult has found a backdoor in Sony IPELA Engine IP Cameras, mainly used professionally by enterprises and authorities. This backdoor allows an attacker to run arbitrary code on the affected IP cameras. An attacker can use cameras to take a foothold in a network and launch further attacks,...