critical9.8Public exploit code
CVE-2018-10661
An issue was discovered in multiple models of Axis IP Cameras.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Axis Network Camera - .srv to parhand Remote Code Execution (Metasploit)2018-07-27 · remote · linux · Verified
Impact
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | A1001 Firmware | before 1.65.1 |
| Axis | A8004-V Firmware | before 1.65.2 |
| Axis | A8105-E Firmware | before 1.65.2 |
| Axis | A9161 Firmware | before 1.65.0 |
| Axis | A9188 Firmware | before 1.65.0 |
| Axis | A9188-V Firmware | before 1.65.0 |
| Axis | C1004-E Firmware | before 1.81.040.1 |
| Axis | C2005 Firmware | before 1.81.040.1 |
| Axis | C3003-E Firmware | before 1.81.040.1 |
| Axis | C8033 Firmware | before 1.81.040.1 |
| Axis | Companion Bullet Le Firmware | before 8.20.1 |
| Axis | Companion C360 Firmware | before 7.15.2.3 |
References
- NVD record
- CVE.org record
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
- https://www.exploit-db.com/exploits/45100/
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
- https://www.exploit-db.com/exploits/45100/