critical9.8
CVE-2018-17879
An issue was discovered on certain ABUS TVIP cameras.
Impact
An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abus | Tvip 10000 Firmware | All versions |
| Abus | Tvip 10001 Firmware | All versions |
| Abus | Tvip 10005 Firmware | All versions |
| Abus | Tvip 10005a Firmware | All versions |
| Abus | Tvip 10005b Firmware | All versions |
| Abus | Tvip 10050 Firmware | All versions |
| Abus | Tvip 10051 Firmware | All versions |
| Abus | Tvip 10055a Firmware | All versions |
| Abus | Tvip 10055b Firmware | All versions |
| Abus | Tvip 10500 Firmware | All versions |
| Abus | Tvip 10550 Firmware | All versions |
| Abus | Tvip 11000 Firmware | All versions |