high7.5
CVE-2018-10659
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by send…
Impact
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | A1001 Firmware | before 1.65.1 |
| Axis | A8004-V Firmware | before 1.65.2 |
| Axis | A8105-E Firmware | before 1.65.2 |
| Axis | A9161 Firmware | before 1.65.0 |
| Axis | A9188 Firmware | before 1.65.0 |
| Axis | A9188-V Firmware | before 1.65.0 |
| Axis | C1004-E Firmware | before 1.81.040.1 |
| Axis | C2005 Firmware | before 1.81.040.1 |
| Axis | C3003-E Firmware | before 1.81.040.1 |
| Axis | C8033 Firmware | before 1.81.040.1 |
| Axis | Companion Bullet Le Firmware | before 8.20.1 |
| Axis | Companion C360 Firmware | before 7.15.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf