CVE-2018-17879

critical · 9.8

An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are several injection points in various scripts.

9.8

CVSS

21.9%

EPSS (exploit prob.)

98th

EPSS percentile

2023-10-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
abus	tvip_10000_firmware	all versions
abus	tvip_10000	all versions
abus	tvip_10001_firmware	all versions
abus	tvip_10001	all versions
abus	tvip_10005_firmware	all versions
abus	tvip_10005	all versions
abus	tvip_10005a_firmware	all versions
abus	tvip_10005a	all versions
abus	tvip_10005b_firmware	all versions
abus	tvip_10005b	all versions
abus	tvip_10050_firmware	all versions
abus	tvip_10050	all versions
abus	tvip_10051_firmware	all versions
abus	tvip_10051	all versions
abus	tvip_10055a_firmware	all versions
abus	tvip_10055a	all versions
abus	tvip_10055b_firmware	all versions
abus	tvip_10055b	all versions
abus	tvip_10500_firmware	all versions
abus	tvip_10500	all versions
abus	tvip_10550_firmware	all versions
abus	tvip_10550	all versions
abus	tvip_11000_firmware	all versions
abus	tvip_11000	all versions
abus	tvip_11050_firmware	all versions
abus	tvip_11050	all versions
abus	tvip_11500_firmware	all versions
abus	tvip_11500	all versions
abus	tvip_11501_firmware	all versions
abus	tvip_11501	all versions
abus	tvip_11502_firmware	all versions
abus	tvip_11502	all versions
abus	tvip_11550_firmware	all versions
abus	tvip_11550	all versions
abus	tvip_11551_firmware	all versions
abus	tvip_11551	all versions
abus	tvip_11552_firmware	all versions
abus	tvip_11552	all versions
abus	tvip_20000_firmware	all versions
abus	tvip_20000	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-17879