high8.8
CVE-2018-16739
An issue was discovered on certain ABUS TVIP devices.
Impact
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abus | Tvip 10000 Firmware | All versions |
| Abus | Tvip 10001 Firmware | All versions |
| Abus | Tvip 10005 Firmware | All versions |
| Abus | Tvip 10005a Firmware | All versions |
| Abus | Tvip 10005b Firmware | All versions |
| Abus | Tvip 10050 Firmware | All versions |
| Abus | Tvip 10051 Firmware | All versions |
| Abus | Tvip 10055a Firmware | All versions |
| Abus | Tvip 10055b Firmware | All versions |
| Abus | Tvip 10500 Firmware | All versions |
| Abus | Tvip 10550 Firmware | All versions |
| Abus | Tvip 11000 Firmware | All versions |