CVE-2018-10660
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2018-06-26
- Last modified
- 2024-08-05
- Weaknesses
- CWE-78
Affected products
- A1001 Firmware (Axis)
- A8004-v Firmware (Axis)
- A8105-e Firmware (Axis)
- A9161 Firmware (Axis)
- A9188-v Firmware (Axis)
- A9188 Firmware (Axis)
- C1004-e Firmware (Axis)
- C2005 Firmware (Axis)
- C3003-e Firmware (Axis)
- C8033 Firmware (Axis)
- Companion Bullet Le Firmware (Axis)
- Companion C360 Firmware (Axis)
- Companion Cube L Firmware (Axis)
- Companion Cube Lw Firmware (Axis)
- Companion Dome V Firmware (Axis)
- Companion Dome Wv Firmware (Axis)
- Companion Eye L Firmware (Axis)
- Companion Eye Lve Firmware (Axis)
- Companion Recorder 4ch Firmware (Axis)
- Companion Recorder 8ch Firmware (Axis)
- D201-s Xpt Q6055 Firmware (Axis)
- D2050-ve Firmware (Axis)
- F34 Main Unit Firmware (Axis)
- F41 Main Unit Firmware (Axis)
- F44 Dual Audio Input Firmware (Axis)
- F44 Main Unit Firmware (Axis)
- Fa54 Main Unit Firmware (Axis)
- M1004-w Firmware (Axis)
- M1013 Firmware (Axis)
- M1014 Firmware (Axis)
- M1025 Firmware (Axis)
- M1033-w Firmware (Axis)
- M1034-w Firmware (Axis)
- M1045-lw Firmware (Axis)
- M1054 Firmware (Axis)
- M1065-l Firmware (Axis)
- M1065-lw Firmware (Axis)
- M1103 Firmware (Axis)
- M1104 Firmware (Axis)
- M1113-e Firmware (Axis)
- M1113 Firmware (Axis)
- M1114-e Firmware (Axis)
- M1114 Firmware (Axis)
- M1124-e Firmware (Axis)
- M1124 Firmware (Axis)
- M1125-e Firmware (Axis)
- M1125 Firmware (Axis)
- M1143-l Firmware (Axis)
- M1144-l Firmware (Axis)
- M1145-l Firmware (Axis)
- M1145 Firmware (Axis)
- M2014-e Firmware (Axis)
- M2025-le Firmware (Axis)
- M2026-le Firmware (Axis)
- M2026-le Mk Ii Firmware (Axis)
- M3004-v Firmware (Axis)
- M3005-v Firmware (Axis)
- M3006-v Firmware (Axis)
- M3007-p Firmware (Axis)
- M3007-pv Firmware (Axis)
- M3014 Firmware (Axis)
- M3015 Firmware (Axis)
- M3016 Firmware (Axis)
- M3024-lve Firmware (Axis)
- M3025-ve Firmware (Axis)
- M3026-ve Firmware (Axis)
- M3027-pve Firmware (Axis)
- M3037-pve Firmware (Axis)
- M3044-v Firmware (Axis)
- M3044-wv Firmware (Axis)
- M3045-v Firmware (Axis)
- M3045-wv Firmware (Axis)
- M3046-v 1.8mm Firmware (Axis)
- M3046-v Firmware (Axis)
- M3047-p Firmware (Axis)
- M3048-p Firmware (Axis)
- M3104-l Firmware (Axis)
- M3104-lve Firmware (Axis)
- M3105-l Firmware (Axis)
- M3105-lve Firmware (Axis)
- M3106-l Firmware (Axis)
- M3106-l Mk Ii Firmware (Axis)
- M3106-lve Firmware (Axis)
- M3106-lve Mk Ii Firmware (Axis)
- M3113-r Firmware (Axis)
- M3113-ve Firmware (Axis)
- M3114-r Firmware (Axis)
- M3114-ve Firmware (Axis)
- M3203-v Firmware (Axis)
- M3203 Firmware (Axis)
- M3204-v Firmware (Axis)
- M3204 Firmware (Axis)
- M5013-v Firmware (Axis)
- M5013 Firmware (Axis)
- M5014-v Firmware (Axis)
- M5014 Firmware (Axis)
- M5054 Firmware (Axis)
- M5055 Firmware (Axis)
- M5065 Firmware (Axis)
- M5525-e Firmware (Axis)
References
- https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
- https://www.axis.com/files/faq/Advisory_ACV-128401.pdf
- https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf
- https://www.exploit-db.com/exploits/45100/
