CVE-2018-10661
critical · 9.8An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
9.8
CVSS
86.5%
EPSS (exploit prob.)
100th
EPSS percentile
2018-06-26
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| axis | a1001_firmware | < 1.65.1 |
| axis | a1001 | all versions |
| axis | a8004-v_firmware | < 1.65.2 |
| axis | a8004-v | all versions |
| axis | a8105-e_firmware | < 1.65.2 |
| axis | a8105-e | all versions |
| axis | a9161_firmware | < 1.65.0 |
| axis | a9161 | all versions |
| axis | a9188_firmware | < 1.65.0 |
| axis | a9188 | all versions |
| axis | a9188-v_firmware | < 1.65.0 |
| axis | a9188-v | all versions |
| axis | c1004-e_firmware | < 1.81.040.1 |
| axis | c1004-e | all versions |
| axis | c2005_firmware | < 1.81.040.1 |
| axis | c2005 | all versions |
| axis | c3003-e_firmware | < 1.81.040.1 |
| axis | c3003-e | all versions |
| axis | c8033_firmware | < 1.81.040.1 |
| axis | c8033 | all versions |
| axis | companion_bullet_le_firmware | < 8.20.1 |
| axis | companion_bullet_le | all versions |
| axis | companion_c360_firmware | < 7.15.2.3 |
| axis | companion_c360 | all versions |
| axis | companion_cube_l_firmware | < 8.20.1 |
| axis | companion_cube_l | all versions |
| axis | companion_cube_lw_firmware | < 8.20.1 |
| axis | companion_cube_lw | all versions |
| axis | companion_dome_v_firmware | < 8.20.1 |
| axis | companion_dome_v | all versions |
| axis | companion_dome_wv_firmware | < 8.20.1 |
| axis | companion_dome_wv | all versions |
| axis | companion_eye_l_firmware | < 8.20.1 |
| axis | companion_eye_l | all versions |
| axis | companion_eye_lve_firmware | < 8.20.1 |
| axis | companion_eye_lve | all versions |
| axis | companion_recorder_4ch_firmware | < 1.20.1 |
| axis | companion_recorder_4ch | all versions |
| axis | companion_recorder_8ch_firmware | < 1.20.1 |
| axis | companion_recorder_8ch | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
- https://www.exploit-db.com/exploits/45100/
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
- https://www.exploit-db.com/exploits/45100/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-10661