7 matches found
CVE-2018-10661
Axis IP Cameras across multiple models are affected by CVE-2018-10661, which enables an authentication bypass of access control. The connected sources describe an exploit path where an unauthenticated request bypasses the .srv functionality, enabling unauthenticated access to the device bus via D...
CVE-2018-10662
CVE-2018-10662 affects Axis IP Cameras, described as an Exposed Insecure Interface. Connected sources document a multi-stage exploit path: an unauthenticated bypass of .srv functionality enabling a Parhand DBus command flow, leading to potential root command execution (Metasploit module and Explo...
CVE-2018-10664
Axis IP Cameras running firmware with Axis httpd service are affected by CVE-2018-10664 due to memory corruption in the httpd process. The issue is documented as a memory corruption vulnerability in Axis IP Camera devices. ThreatPost describes a broader chain of vulnerabilities in Axis cameras th...
CVE-2018-10660
CVE-2018-10660 affects Axis Network Cameras. The connected sources confirm a shell command injection vulnerability in multiple Axis IP Camera models, enabling unauthenticated remote command execution through the .srv-to-parhand flow in the device’s UI/API, potentially giving root/system-level acc...
CVE-2018-10658
Axis IP Cameras are affected by a memory corruption vulnerability (CVE-2018-10658) that can cause a denial of service (crash) via code paths involving libdbus-send.so or similar. Reports describe exploitation potential through the device’s dbus interfaces, with root-level access scenarios describ...
CVE-2018-10659
Axis IP Cameras are affected by CVE-2018-10659, a memory corruption vulnerability in the camera’s software path that can cause a denial of service (crash) when a crafted command triggers an undefined ARM instruction. The issue is documented across multiple sources (NVD/NIST, Axis advisory materia...
CVE-2018-10663
Axis IP Cameras (multiple models) are affected by CVE-2018-10663, described as an Incorrect Size Calculation leading to information exposure. Public reports and Nessus/OpenVAS entries corroborate additional related vulns in the same product family. Remediation: update to Axis firmware via Axis De...